#separator \x09
#set_separator	,
#empty_field	(empty)
#unset_field	-
#path	ssl
#open	2018-04-03-20-53-01
#fields	ts	uid	id.orig_h	id.orig_p	id.resp_h	id.resp_p	version	cipher	curve	server_name	resumed	last_alert	next_protocol	established	cert_chain_fuids	client_cert_chain_fuids	subject	issuer	client_subject	client_issuer	validation_status	label	detailedlabel
#types	time	string	addr	port	addr	port	string	string	string	string	bool	string	string	bool	vector[string]	vector[string]	string	string	string	string	string	string	string
301.714791	CKiAWd3RGks7UjUnml	192.168.1.122	49158	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7KCdu3rTlrxzWt4Vj,Fn4RRo25LV3I5UzpRi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
636.524847	C3crvh2c5CJruuY9h3	192.168.1.122	49160	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Ffo2ZK2KPw4JNF2GO9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
792.262397	Ch33gg1zrqrTXbG9Ua	192.168.1.122	49162	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOMNiX3gdSOGhoyZC5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
964.594585	CQRPOaweFesf2xIn3	192.168.1.122	49163	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzrIXT3ObqSGQStcr2,FrmqU1uFPrhQwTbo7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1580.331437	CGYjcD2KU8qZx4lH9h	192.168.1.122	49164	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZ5AUR31dTHzmmr487,FGJ5GdE1MZrT0MKLh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2154.338632	Cp4iu54RqNZXCmtdr7	192.168.1.122	49166	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fi4naC1EYAQKEjRMgl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
2316.525208	Cf5EWfedI38WiBJ76	192.168.1.122	49167	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHze7hh9R8RJmFBO2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
2483.867919	CdO29D1MILWlyEU3A6	192.168.1.122	49168	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1nD1U3ksAziqB3FAl,Fdr9403mJJ1EpGquBb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2829.055190	Ch7VNUCRaso1r1Sc8	192.168.1.122	49169	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FG79fg3rKRDFbPT7T8,FPV5i84SAZkqIdQHM5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
3123.844769	CLa8Xp39q591VuvsSf	192.168.1.122	49171	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYEZpM1j4FYnk3Gud4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
3270.946152	CPvqtyKCGnlsaFvq1	192.168.1.122	49172	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fa5wr01b0cOInaEmsh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
3395.270471	CIm8shvRinNUI3iAl	192.168.1.122	49173	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnijSE2Ach9IWyX5n4,FJn2kz3if4OlKJKkmf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
4052.935192	CQyVSJ3icMpv70umff	192.168.1.122	49174	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsxWHx48cHZlHBBmtk,FDA6jY1JJqjKilk6w1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
4347.706951	CUOHqf2c4qtpCPH5nh	192.168.1.122	49176	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F86gtQJzLZ2KKIeUh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
4493.804771	CKnN714Cs2uFcqHxK2	192.168.1.122	49177	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZzhho32zCpYNqykK2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
4666.126464	C2cy7e3ZMmt06x275c	192.168.1.122	49178	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHaIWc1VwNAWn1k9G4,FJqMdv4peuYpfRINPc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
5236.797334	Cm5QsLVNgGwgpPqLb	192.168.1.122	49179	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPYKeFCcS3U5CinVj,Fctajm4I2B5hQp4WB	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
5567.587931	CkV8np18xjsuPty098	192.168.1.122	49181	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4r7Wc14pXaiV2iAC5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
5743.652059	CSC0Cb48oTB4kX7Ea5	192.168.1.122	49182	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fbq5f1rMjJp35JuYk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
5876.977298	ChdLT71S7WGZviwhxd	192.168.1.122	49183	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fiupv51BeXDg1XETPf,FqxzoP5WHb1SDtYii	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
6486.683629	C4lTpq4uFNhhMne3Oa	192.168.1.122	49184	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdOeY2Z7t4zroByhe,FGlTLhnorEPrSWqr7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
6788.175089	CaIRnOs3TiSm0PT91	192.168.1.122	49186	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgfHR24U5G3826XZgg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
6927.243668	CrOFQr24zz7hFRUxPl	192.168.1.122	49187	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4Dxby22nD5dYWq788	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
7049.573164	CAuRfE1bqxDs93ps48	192.168.1.122	49188	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMV8181VyXpgoVYn41,F1rD8D1X6r0xAx7212	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
7685.247256	CAaefi1MSrv6yntA8d	192.168.1.122	49189	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9DBWB4T2F7qVBqGXg,FNxau72KRmcGPGwI2f	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
8024.031125	CSANuR3XAqEM4KVPCe	192.168.1.122	49191	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fr6trM2W1XtF9xVMQa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
8188.106187	CDT5f2jGWH4PqWnb	192.168.1.122	49192	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxGAcD2HX1I65ODPUi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
8332.438210	CGBdlD43DcSFy1xpR2	192.168.1.122	49193	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYBTvA3VrrSFJ6RKzb,FiduLP1I1b5I0EFNP4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
8915.115548	CYicHrJDRSLBR25P6	192.168.1.122	49194	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoQ3hu3ZlLyZ9uMQr,Fyn8HD3XdxkEV8MdFl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
9244.861940	C0AoYl4KZ3uDdAnPq	192.168.1.122	49196	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzxdWD2vIxAWsovRBa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
9388.942509	CIpWNS2FKQmx8Puyvl	192.168.1.122	49197	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FjyEme2JNHKE5DENj9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
9557.268978	CrxvSe1xEohvrc4cbi	192.168.1.122	49198	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fdmwpp2R0wjBpHx6Ee,FiAINd3ke0efUfK8ab	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
10111.956317	C3ka3x4ko6V4ttloUh	192.168.1.122	49199	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fe2HzZkjWE3wWsYJi,FWFia63D5YjGCh4IJ1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
10385.706952	CiyYpG3DG8b5GBrvQl	192.168.1.122	49201	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwdIz54G4UlfMWnR0f	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
10520.740312	CzQe8A1GVyzEH5MAJ4	192.168.1.122	49202	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FINMKD1ZGANgEFIIU	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
10670.069123	Cmwi1O2k9okNPFhUH7	192.168.1.122	49203	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHrIoj2At1vy9uI3Fk,FQ5eSz3EnwJCPI5zq9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
11002.236348	C0k9Q4SrlO8m9VLs1	192.168.1.122	49204	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FH0BwK3poiitykBYMl,FEu0Dk1BtbeFEojNTi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
11327.005244	C4BFhC3iuCM0a1YsNj	192.168.1.122	49206	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmBKw793BI4qdv0Va	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
11470.095356	Cag8r54HIxIfU2onUd	192.168.1.122	49207	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9iQYB27YlYpEj1zJk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
11646.422729	C9uN8E4sU45BcgrgSj	192.168.1.122	49208	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUNcHQ3couYYYN2qt5,F8NEHS32WNg5tkYVLh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
12229.110689	CiBxPt2rF4mczbw4li	192.168.1.122	49209	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSs1Gc2NzmWX3nMhjc,FPvVWv3vLSX4P4Cz5k	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
12524.618199	CJaJVU1zVYMw9kiMWl	192.168.1.122	49211	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5dB5D2mV9a3OjWqq7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
12693.696253	CBEcGg41WXMk1Dq7Ib	192.168.1.122	49212	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0F9oX2ck22AdFXzj9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
12822.022900	CDzXyq6Gtjnjw1Fud	192.168.1.122	49213	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkkqhJYmxBbtfa0s,FcW0kb2FkMJOha6uvf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
13463.695309	CsCsEP28X2EAFiKMA1	192.168.1.122	49214	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYEPV21JsVKOTKRz3e,FaHGVS3nSSoTQ740A6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
13723.459885	CQ5gZq3c17ktXtoQNj	192.168.1.122	49216	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FseqHO3buZnoDaWPb9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
13881.512771	CPyXA528k40IoUqkEb	192.168.1.122	49217	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5PeDS1tNBJKwzMuKj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
14008.829165	C8u0tb4VHFOkveKi89	192.168.1.122	49218	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQ6NBqEdBOmmi6Eu7,F8dmqd3rbDPFdGl3z3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
14259.990113	Cy0j2z4V0cl4ua32ia	192.168.1.122	49219	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9ORhWpgY5IKSu0n7,FTYzIk1WxYwqIloBQe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
14561.769898	CIcbvp33Q0r1Jp4xce	192.168.1.122	49221	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnLI4f1xBIlNfzxsB9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
14716.832969	CYEzlGAryFivKr3X4	192.168.1.122	49222	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2EC27fJ96rsJBhVh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
14849.157896	ClLnyB3sdMaY7OtzAh	192.168.1.122	49223	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4wtDH2g2czdTqOlhd,FEmaZI2YSIlzzstL23	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
15411.836730	CjAcFF2imyDSlVkPDe	192.168.1.122	49224	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FySnEr2XgucFiYXdB7,F2u6rQ2ymLeox0GXB8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
15723.625946	CaVRpJdCFeqlWGJ9	192.168.1.122	49226	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUDHTz3l2eGeii9a1e	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
15900.684887	CcY9ZF38cYrcqd58Ki	192.168.1.122	49227	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6Pcpu2eIvdXyE8vP1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
16051.005677	Cfjcon3O7CmFgUWnfl	192.168.1.122	49228	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLVW8i3Jnq6BGCrzz7,FqVBo44ktsMwlM3N57	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
16702.672117	C4vaEpkKRkBgiv3I1	192.168.1.122	49229	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMsfXA1jIPVr3gabbb,FX8FiM2VEdvAQHWxp1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
17010.187743	CMjOel4u8LlOJ9eZqi	192.168.1.122	49231	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPtkiL31vy4nP3BZri	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
17186.303507	CBIQemhyRQCpdkI53	192.168.1.122	49232	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FkWZnYqWWR2ILVNkc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
17336.624560	CQp8JZ3PtucVkFFgI9	192.168.1.122	49233	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDjEhw4xY6vq0WD9Ce,F3A7dk3pCWp51d3vUk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
17975.302053	CoOHIe1JxVqzwtzVqd	192.168.1.122	49234	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FglGqS1BjKrm4vGpb3,Ft9VzC4fepcLnlVlQ7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
18278.050299	C2Q7Yi1RCaW9VOBrMl	192.168.1.122	49236	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Femby44g6I2uRMHcQ1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
18421.109638	Cpw6XB33aYMRqaJ1F8	192.168.1.122	49237	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrjQCZM2miMC7MMu4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
18555.436290	CjV2AM1IJKkmVyIXQ7	192.168.1.122	49238	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZa2z6iuFHTgPSVR4,F1FJWT1ZEZKwckLiNa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
19135.109748	CBZtBX2JHfuYjeH0Ac	192.168.1.122	49239	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fa3KYe2x5gE8UNfpk8,F5vL084RYmusmPUMuc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
19459.899400	CYa4iF27JKEEqiAzx8	192.168.1.122	49241	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQlwIb3DMsSnvuV8Zb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
19614.985282	CSojDY3YOUqPU5zCC6	192.168.1.122	49242	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F71oDj1qGgaSm79CS	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
19745.316973	ChdYnH3IjzUGw0fyHg	192.168.1.122	49243	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5ljINk3TSFDY6Us5,FY6dDN2ZhFI8Ns2wFc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
20089.792751	ChU99t1Cj9CuqZzx19	192.168.1.122	49244	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDymiz4LGvVHlb5qi3,FwFeon3FCnLjv3Vewe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
20408.575194	CzDUD42xRWrLLdBDt3	192.168.1.122	49246	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7mcol4os06FKWZC84	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
20573.673801	C2ZO5o1VYKAUQhrHO8	192.168.1.122	49247	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2pv9c27hZp5GHaoYl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
20723.012613	C0iNsq42AIZiloaFO2	192.168.1.122	49248	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrR1OU1NUzhXofLXv7,FZl2Er1pynS6lrehuf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
21351.676659	CJQYl6ewe68g4wQlk	192.168.1.122	49249	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZCIY24GOwysaL6lL,FHQ6ub4gOSJqYpY9le	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
21653.433741	Ccqwmw2X6ogcjN3vrj	192.168.1.122	49251	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhW7W318O920d3KNgf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
21817.511662	CPkKf742AB4ZIyGJU8	192.168.1.122	49252	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKXXUF4zHmihDXFtd7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
21956.836582	CFVXuS3rHiaS0UUrb	192.168.1.122	49253	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ft7wJ74MVgMi0OQgv8,F0KIL3A0u8AB75Nla	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
22588.515657	C8f3Dm10WpNPEOk4R8	192.168.1.122	49254	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F42uQ52g04FSiqW6N8,FAyaGU2fYasolTqKI	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
22905.298994	CQuMXji2hOFzZX9j1	192.168.1.122	49256	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBqE5e3es7QgsP7Tzh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
23035.373571	CQIJid3UHlUW1LB5j3	192.168.1.122	49257	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FjtLdfuqvnd2S5YMl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
23203.699267	CWNqFY3wnl2k7aIpU	192.168.1.122	49258	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fd7WJu15mk6QdrnxP9,Fql6cys77hrF325s9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
23774.390083	CAMDBc1hclhyKT5MEh	192.168.1.122	49259	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5KVI13EA49FfE3NEe,FKTURv1COo7okWE2zi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
24036.159218	CtjEc71BFE1NQ3UB8l	192.168.1.122	49261	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1fsCg1nvY3y9W0okg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
24158.207381	CiqAqh1sjXrrAHaOg2	192.168.1.122	49262	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F62zhU2P27B9woOAG7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
24320.525071	CaQtJSUyO0dcYP3Ii	192.168.1.122	49263	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkWLDk26arghjGGBv6,FbLQ1P1Ud0QjasdDj9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
24667.704982	CFQUGiOW5k1psKns8	192.168.1.122	49264	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FftiAx1DGQRUAlYOCg,F5uSGh1mCJ0mhnXl88	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
24944.495005	CyqRaI1bQTYc69BEH	192.168.1.122	49266	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fy57E61Axw0ETpPBai	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
25074.555051	CNoZbB2K8np9ZAMO5e	192.168.1.122	49267	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F72vPf1G2HokaeC83d	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
25247.888365	Cywhuf1IrLCswrCxEi	192.168.1.122	49268	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FU9ttE1RJUeYt8E0pi,FlsjHLuxxKXQwCoOi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
25807.553550	ClLdA444X8o5GLdHD6	192.168.1.122	49269	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmVBJ82tzoA1ShzjJe,FxIgfB3n1S9YKRiTU3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
26076.345263	Ck7OhtgC3DZOsRw7e	192.168.1.122	49271	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fw2wdWyUHHUf7Bc1j	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
26235.444455	Cj4rND2v7MBDxcd4Q2	192.168.1.122	49272	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FkG6x71i5bJ35ACVC1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
26373.777693	CTLU902sKDqSA7VIpi	192.168.1.122	49273	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6Zb4f1QqADg5kPwy1,FTQAofZcvxlt5kORd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
27029.450202	CkPyQL1MPEyQxPAqJ9	192.168.1.122	49274	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCekeeWSUN3Xtcxue,Fq4uH03eLJMVmAReR9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
27350.230420	C7A4iOmlz3sGtHDUh	192.168.1.122	49276	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIfarv4kkcl1Y0NuX5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
27511.298167	CsAMUX2YprFbu4t4Q3	192.168.1.122	49277	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fxd7pN2IlrR7xBPe2e	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
27654.618549	CMOaOq3DDBzvSJHlte	192.168.1.122	49278	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVVwCF2sMSgdcllDyj,FiT00m10luKlQ9fCA9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
27909.795578	CSDEO646yx11jWmFwl	192.168.1.122	49279	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZmfkt2AZDiGY5azBe,F56WD33JIudUXzTai9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
28189.569494	Cvnq8Qfq4MNLKScq2	192.168.1.122	49281	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FSHG6fDEt9nKbMyBe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
28367.629412	CCgnX5a7KtFDM62k	192.168.1.122	49282	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FsVbuF29lvM1KbXv38	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
28523.959096	CV5JOQ3rU4tCzfeuDc	192.168.1.122	49283	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwZlq7160tIVg4dAs8,FFz4rl3NkUIhkeccmg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
29146.634517	CHT3Xj2soBZ5efeSX	192.168.1.122	49284	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFTyU2XA2xtanmst1,FRH8kK1RyskOWPOR5e	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
29439.439346	C1ATn33Ag2S3BX9M2f	192.168.1.122	49286	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FuDBth391Tu4mTv5h	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
29590.547943	Cv2iWi2AHMShVLr2Xa	192.168.1.122	49287	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FspiIy2AlQ608wLeD2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
29737.874006	C26fSJ2PGARlXgloSe	192.168.1.122	49288	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlmXqb1EzS9VBOIEb8,FJUyinmlECUoU18dj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
30338.547645	C9GejV10b2knQRs0q3	192.168.1.122	49289	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8Fczw1b9502dt05Da,FZsp2x2PqEt3ZWcvd8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
30928.530804	CiKz3n2Yapb2XGzzwb	192.168.1.122	49291	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FEjr743fCdSwJRGcz4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
31064.618667	CA9aGW2Ja11RgPCuj	192.168.1.122	49292	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Ft3JO02S4NSEDXM4q9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
31233.947446	CeTPuW16iI8ryLf0Lh	192.168.1.122	49293	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfCWtg3etFMlrmwH7k,FYGRtdOEbFxWKHzP9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
31775.623973	CB9OxS3CrDD9b5rmj8	192.168.1.122	49294	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuWqjw2jfAWCQlGu0f,FbUCeO2DFtzdhnKTb5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
32396.616275	C5fFUW2yrgyDO5kK6j	192.168.1.122	49296	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAR8pL2yl94LivAv1j	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
32534.702643	CNWgAcnKd7tzUaF9f	192.168.1.122	49297	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBqYXcMNIl798zeF5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
32702.024478	CCrgXo3XhQekI27Wya	192.168.1.122	49298	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUnXZ74PFPUUW8WYXb,FbGrkP1bSEgb6Mi6Ui	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
33299.695077	Cx0wOdOTY936MGd0c	192.168.1.122	49299	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0ZGh52OnlPdsDyVD,FyMAvu4qf8kYNyG1w2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
33610.482954	CXsr00237Hw797XPX2	192.168.1.122	49301	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2MkYc3v6AqEznLrW2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
33774.553565	CMVj252q7YLA9AkB1	192.168.1.122	49302	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmmTNk1OCfnbeXh0x6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
33944.882987	CAkBODOlexdQkS9o2	192.168.1.122	49303	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOFkGS2FJ4FRNX8Msb,FWVxfi4MLVioui9rre	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
34525.567936	Cne6w0491y6qd7LUu4	192.168.1.122	49304	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsV2wq2HJeFAybdHfh,F286ym3IIaIoYnLTv	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
34801.063602	CuLZ7f4KtmfnlQjMB5	192.168.1.122	49306	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fh72ig2IwRZIxEa3dj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
34941.150908	CiEXwF2aMUxQe50Kp1	192.168.1.122	49307	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMY5n31yWX4b5v8vH6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
35061.496963	C8cAc5IDdrdEEEc36	192.168.1.122	49308	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ffed5b2UNjZ6bxHX4l,FC91pe3Behb823zPu9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
35683.172486	CjEtmk4jVgaIgGOoT7	192.168.1.122	49309	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8CWZ711zjHrpEokb8,FuBZvG1u6Yi2J6oHj4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
35963.632592	Ce3vxN3RGblWe7s6O2	192.168.1.122	49311	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbgEV43YJBGFQfSao3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
36104.683969	Cwn0SM2lDd5HIORfUl	192.168.1.122	49312	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcUwQG24ZHHTIS0bX9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
36229.016684	CfMbEc1vTrQ5mLuS62	192.168.1.122	49313	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrdmHr98w7qu5Mco9,F64opIEj7yH7NjsYb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
36885.691255	Cm6vtB4HUyX3AaebW3	192.168.1.122	49314	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjRWXP2RrQ76BQh4i5,FphbnG3PcYeKLub8F2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
37213.505051	CO32GV2PlSGVUAaw9k	192.168.1.122	49316	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJFh0CbYoGPf9CZm7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
37375.631034	CKss2r2C0V6jBwzxk4	192.168.1.122	49317	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOMu5N1Y98Ej1Apmr4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
37539.961964	COU3a21K5i8ycf7Iqj	192.168.1.122	49318	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKOi6W31m2FgHyz6Ga,FPEpaf4te4imETwT	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
38089.632394	C36qcigJsOcxahUY5	192.168.1.122	49319	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5FU433QDZ7WU4BK28,F2ypug1RwrKsRVl2Lg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
38395.099799	CXhGWGweYiCJ2ovXl	192.168.1.122	49321	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRXMRd48KBVw5Kiii3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
38518.153715	CFV6o50i1jc8JnSPj	192.168.1.122	49322	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYqwtq4JbZXbZxInt5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
38685.479312	CTpBSb2e19cNski4Lf	192.168.1.122	49323	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FN4iI73TZKCYOdAxsd,FjRUzg1IRiHnEF9Q5h	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
39248.147825	CUHEYP2SWQpAkjZ5x8	192.168.1.122	49324	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoCVxr2k0VE3pR3Iui,FuuawJ1xS37pecz5M7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
39529.626996	CeFU9b2APjgnzqIrpk	192.168.1.122	49326	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlCfak4FhNbFrcHMFc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
39671.672262	CRuULi3HB5VqPtB7z	192.168.1.122	49327	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FbbcaB1DiQSAwwePcf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
39818.988418	CNXfDs328dZwCB854	192.168.1.122	49328	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjuF5h2DGXfbZUbZ7e,Fxhza49j2Pf5924S3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
40473.670620	CH76LIWC2Gw2hat19	192.168.1.122	49329	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPeJ9A3znFzwe0H9U7,FOTxwP1faG9MMhAcL4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
40806.439975	CKvwwF2oNRVtLmTrIa	192.168.1.122	49331	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCHJ2B1aSmP6Gch6vc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
40945.504726	CPpaDe1Fz303hs8eR2	192.168.1.122	49332	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmyO7y2gJFR0IPgpFc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
41080.832544	CTJXUj2KhThMLRCet2	192.168.1.122	49333	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwVrsA2Wv9N8UWVwAb,FHSLwXAARAlCLTOO6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
41695.506515	CJpiUT1RSkcZkPwzl1	192.168.1.122	49334	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHDv981e9DnMGMjXe,F9KggZ2nXl9RjyQ1C6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
42003.262303	CeHlxBD26A6aVZtb9	192.168.1.122	49336	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6YBKs4BMBiUIOZVea	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
42157.326282	CpVnxykX8HRabi4E4	192.168.1.122	49337	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHD6C3ZDhdf576tM6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
42305.644193	CRHkKx32PobWFwzrV7	192.168.1.122	49338	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSm3dN2UYD0kmzMG22,FbTx1v3B4s5J8t8qph	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
42873.329850	Ct0sO12WbA1pFmkvT9	192.168.1.122	49339	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9NbDX2vVZX82VJph5,F0QehCKRrlGeFfdl2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
43181.100691	CJcJXH2l3z2HrYHur	192.168.1.122	49341	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FjBwUd2ptb4uCqbYZc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
43317.173573	CNry7U1F7caiaoy8w	192.168.1.122	49342	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fsk6dlrd2mBuSgXl6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
43478.499296	CMQ9E72ooVjbXwLRa1	192.168.1.122	49343	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtLFuj227k37Q3wwof,FRVMIa4oKzYum2oas5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
44052.175496	C6zydR1lTVmmhWYAmd	192.168.1.122	49344	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAIvra2UNIS4rtj721,FRtn6Fu5mvDuwgFm3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
44314.956166	CuJegw2Xth8wtzbqtg	192.168.1.122	49346	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FEk3jR17ua2fwmqJG3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
44484.022017	CTBucw4W0Thb3M1ON2	192.168.1.122	49347	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FTvzRP1vmD5PpNK17j	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
44611.348776	CDBi9h4wEStrvs9Ss	192.168.1.122	49348	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ft0uXDBkHZ0i3YRS5,F2rz1D1ghVuY66O8Fa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
45229.026913	C8M87U28LGgDoV5E59	192.168.1.122	49349	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgjOYf2AfzCGMIRX7d,Fakve61nYI9uDOrwv7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
45521.805200	CQIVxn2CYg9lO2dMAb	192.168.1.122	49351	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJyGce2kcE43kyDW5j	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
45677.888263	CzVxtS2jHSZy10PLu8	192.168.1.122	49352	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FVeuYs2pRcFllkWj11	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
45842.218569	CrNo8F4rNstZIpO2P5	192.168.1.122	49353	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdF6ZH19rJ91EhKZ07,FLteHz4jCzA4cONVn3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
46498.882452	CqxVzC4osXDmcIzOHg	192.168.1.122	49354	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCtfkNLs4EIyaa5qi,Fuos1s3DYrs9K21Aaa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
46792.634164	CBpp7juRUL358RKRj	192.168.1.122	49356	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FB0RzT2ggqr7yskvza	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
46956.676560	CwxvIb1PgNEetoafz1	192.168.1.122	49357	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fut6Mt2J9PzSepjQRi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
47101.999693	CbELvZ3oT9P8TqT5ga	192.168.1.122	49358	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKavUf2FZmXYcYsPJe,FU85iA3Tfd6CC2eeE	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
47681.683564	CoaWHb2OfPgYBE2CD4	192.168.1.122	49359	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7mIoY3TA0wwGmjZ5j,Fv2NbS1pLjih5zZlN5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
48000.454253	CjDSH749vhgOmXuN46	192.168.1.122	49361	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FOs1L11t4vAaaQGgne	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
48164.533265	CnqqNs1DWDOho41N7	192.168.1.122	49362	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5wknVb76eXmeKnM2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
48340.871360	C8dwsD2JG68pkfgKqd	192.168.1.122	49363	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FD6Zhs2qRemlG1jqEh,F57k952o8s0ioUCbD3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
48890.541789	CBSb5Q2RqsyFYzs109	192.168.1.122	49364	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7Xn5e1j0xNBQAYVt,FJnBcmhRQAyMw2CT4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
49177.318982	CdKQos1y0v4CH4i2Rb	192.168.1.122	49366	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Ff6aumqrHzy7fAWW3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
49329.378815	C6HXCw3R1nY52CVCo7	192.168.1.122	49367	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBUAlR2YzR7OuFoih7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
49481.711168	CDbufP1xGzL5TLKR37	192.168.1.122	49368	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5Aq4930fjGNxzipgh,FXKCWP1J4JRBNf1Ys3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
50049.397461	CrNaX04sRykuYbtykg	192.168.1.122	49369	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fn83rMHVmEVTiN0s2,FmZ1Q6Gc3G1gdfId	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
50355.182873	CBw2ds3TQltp8wtf2j	192.168.1.122	49371	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVrKo723ofzDmzJqr4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
50523.254530	C5ZuAy1m0DeWZ5FvU4	192.168.1.122	49372	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FoMIko2AyNqXWbtC	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
50645.584861	CNXsaMHKSCdyHW8Fh	192.168.1.122	49373	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEYRqk1Hy53fMKF4Sl,FQcM5X1FA2Dj2JgeQg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
51302.248908	CthCttwEp2Sz9V1ki	192.168.1.122	49374	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxecGj2zb9oFOklv5,FuWAXq2KZ3kC7B1hY5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
51586.036211	CYohkXg2qlejUictg	192.168.1.122	49376	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FD9h0GFJd71Io7Ymf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
51734.135437	C5zhtZ2JlsvQGGiSrl	192.168.1.122	49377	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FTisPf3a49QnUrUkXj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
51881.451832	CRuakr1qjT9UPfsVv7	192.168.1.122	49378	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZFzC51OcaJLnsRUX3,Fd1OLd2NrVwjp6FBMh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
52203.614688	CrU64GLi9UsKg5jGb	192.168.1.122	49379	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FL8CGy2YXcQguB7Fv3,Ft0iPf2cSIEgc0GnCb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
52468.367793	CIYjCc3dVzv7jWBhJ6	192.168.1.122	49381	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FusNeA3JSmplFNsI3j	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
52647.418555	CK13rP24S7ntij1fAj	192.168.1.122	49382	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FChoeDoVNgSarHP52	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
52820.742174	CPOecSGBRw9LYcs12	192.168.1.122	49383	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaJ2Gb46skXLKereFj,Fv6Glu3IyTcvGKSrE	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
53414.406047	CEmURQlIZGCKwPsAi	192.168.1.122	49384	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5ppO314NSVJKavyNe,FS44R413i2pfONSyii	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
53749.180455	CbGW0jvqERB3yGOek	192.168.1.122	49386	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FaZMPi4PGIyzXTbbL4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
53884.296970	CaCWup1z8SN5og9u6h	192.168.1.122	49387	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfHsLXjvCrrMmWmHl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
54057.630270	CsoBFM26UijIzpcSk6	192.168.1.122	49388	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fn0oh03kU59scKIHNl,FFMug01oHYLxedMoBe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
54616.303691	Cb30mJ1MQVUeO8eOpg	192.168.1.122	49389	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8x2epbJovp4IWu54,F32UAL1jzLBHdlPIK	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
54934.783649	CKHnJoSUtaa99J7r	192.168.1.122	49391	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fc17QZ1GtGhbtILKie	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
55085.844532	CCXjoR3CUqKEOlfkX5	192.168.1.122	49392	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmdxWY3IlRcZ0KeDI9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
55217.177648	Cb64b9XSZZFcnf423	192.168.1.122	49393	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7ys0v4sep8Inopph6,FWuMAX3diDtWMIDUI4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
55779.857063	CCSBAn7GCoGqYXXk	192.168.1.122	49394	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdD6vS2mLHvDRP68mc,FZEcU22F2R1lN1uKe2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
56085.632240	CcolcU2vLYX9dE6ORg	192.168.1.122	49396	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLFCZj1mHVtJYifBma	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
56209.710332	CO3bYF4hfeY9G1fLI	192.168.1.122	49397	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPSY8ETHWJsyc19U4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
56340.032273	CV1wil3PZ14JRcEHPk	192.168.1.122	49398	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAi9fOHHQl7b7LQY,FtrjtB3cQsAdq9bc7i	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
56998.709581	Crorf77bqIPP6Wzta	192.168.1.122	49399	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgLPUN2f2NIqgAPClb,Fp5Ael24fd6h6Pqi06	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
57270.491916	C3ZbeL2ChvlvI40AGa	192.168.1.122	49401	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAhIZFZpXg6ALmRma	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
57405.579769	CAV1o71Rl5DAmw0Xw3	192.168.1.122	49402	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBPmY61zyTwZE8IOQk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
57534.912447	CCpAZh29tk17vIatQh	192.168.1.122	49403	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvKxnG4j4wVuFpJdO8,F14G8xEGCGmXPMvNk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
58172.597436	CkhjfV0mH18aG5lf9	192.168.1.122	49404	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUoc0f13PkhdYTxqLj,FLBKDv2OZa1MLMR5ig	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
58449.343002	CXCe9GGU5B400W9Tk	192.168.1.122	49406	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FSv8gA4lkHnbxY9KA2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
58629.390940	Ct00U71X5GKZJzwzZe	192.168.1.122	49407	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBb2Id4xWiIl0NMMp9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
58780.719834	C1ZrlM30ggzwGQVRT3	192.168.1.122	49408	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdMqUX2E7eFtazgnqh,FPv1wh45VI3osVyrW6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
59125.888291	ChlUjbJtBPC82FXh6	192.168.1.122	49409	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZTvlG1jqD0tg33DJk,FOdAeMc48n6d6606l	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
59732.856786	COKCzu3JQMidtEH73j	192.168.1.122	49411	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzyCql2WbeTSI6PKX7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
59889.932751	C7oPJl1sMnd94YRLj	192.168.1.122	49412	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLZumMTcuCurVGTA5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
60034.262428	CLnQX04Zlj2U0QeFBj	192.168.1.122	49413	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbItDZ2AbAUfIyJAe8,FdgjoX2Iv1CZZ0AJzl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
60616.945156	ChnPJU3AH7Sm2ZDzjh	192.168.1.122	49414	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMyMMnoZxEYI2WNa9,FxjPR9I75beYyKw4c	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
60908.718689	Cqm5Oi1HBLtOCAXxQ8	192.168.1.122	49416	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGmlr81uIximyp98ph	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
61044.782134	CvrnTY3OGJxK0UHt31	192.168.1.122	49417	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQVwQf3ukGZ4kV64Nl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
61168.114097	CaDrEW3K2UhMOGvOZ8	192.168.1.122	49418	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fq6k9C1lVukRnfzhCi,Fah5uXkvdAmP2LQMg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
61731.784302	CCOxke33uo1nKfQ3ie	192.168.1.122	49419	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4848v48eWcrkmL2lc,FNz2FeYWOSIE8YZ79	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
61983.278268	Ckf54f3siZsSCTgzZ5	192.168.1.122	49421	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fpwe9n1XSBQZp77gch	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
62127.338661	CHWbKM3OLvypvSRs64	192.168.1.122	49422	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FoyFWZ5dFSiTRthza	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
62274.664475	C347mM12lyIEyxMEh5	192.168.1.122	49423	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQdDzO2ADfH2Aplzn1,FgAaki4JVlPvQnRal7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
62875.347658	CTtQh32IbVReW5bfWc	192.168.1.122	49424	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6lsPkotWhZSbnQa4,F71iuD4jQKL3rfd9f4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
63155.815827	CyTIMU1xCMDElPeogd	192.168.1.122	49426	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNZjZD4cbVUmWFNQt8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
63313.864743	Cce8mz1Y4VF37uBMck	192.168.1.122	49427	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FShJ7c2JQc9yE4HLt3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
63459.197644	CRam6y4xPNI7NBVenl	192.168.1.122	49428	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKad6T2moynnVNA9Xd,Fk8hdD2qpLEt6wlS6g	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
64036.879108	Ca7TNh1sNFAAHKftj4	192.168.1.122	49429	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFe6Q63ocJOdF1naC,FBTUMC1zvdzCxHVlB9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
64650.851535	CS4CSFyYe8z3cMEvl	192.168.1.122	49431	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FX6scK1WCkuUhsLUlh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
64801.915286	CUu3SH29NqZlBYK3zk	192.168.1.122	49432	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FVCe783HNPxfVLgcug	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
64929.240220	CACfm3kLfFf1Nob2i	192.168.1.122	49433	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F81nKe3evoD5DDxIrb,FHAoZf1XXvowW25iBa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
65496.908170	CroUx13E81QDSGrBr2	192.168.1.122	49434	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2kIWA2U24FTo4g234,FD7g691EyrCIq3f0De	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
65776.385287	CkiQd51zLLnTxYhRQ5	192.168.1.122	49436	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWS17n3uvpfP1mMCSi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
65916.476183	CURfls3IRgxeqRZFY1	192.168.1.122	49437	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxtQhc35mgDOUQs3T7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
66077.803216	CljYaZ35C2KZGT6rTg	192.168.1.122	49438	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1aTvu3Q04B7777V0e,F86Eib1IyWYkRozwae	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
66723.471129	Cke5u73WkPV1GfQJ2c	192.168.1.122	49439	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCYXIX3zkAnt0rQvj4,Ftg1C12XAILUQIri84	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
67079.304536	C6ly8E4PAx6a9NcoN4	192.168.1.122	49441	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8xRZR24arbuWNQcQc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
67223.375613	CXGIGf37cjeBwOAMXl	192.168.1.122	49442	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FiqZFl2avvCEYsDKU7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
67359.695775	CVoUxl3MPdcrjgTk17	192.168.1.122	49443	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWm9cutD122PQ92ti,FiKeLOyfwwL7TI4A3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
67946.380552	C4iVVqHP2xmnjICXc	192.168.1.122	49444	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqTjXD3bX9CY1Lgak2,FAP1AV1CS7oadpjrtl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
68225.845857	Cjo9li1z49logrQWI5	192.168.1.122	49446	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdxTeo1GJGPBFGovYh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
68352.899394	CNVpIm2Kx0kGjkSm5e	192.168.1.122	49447	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZ6qwv14ngbHpUVctf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
68489.219808	CQOag7wnEMfzSEK2l	192.168.1.122	49448	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5T22rnjk9NTnJmel,FCEtQx46Jwk4fHet0b	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
69071.888198	CEeVlr3UBNZdcMHnF2	192.168.1.122	49449	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDSsnf3c7cPqqD0YD9,FuDaNv49qBtihCoqId	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
69360.376523	C5qDbM2bWpSVNec6P7	192.168.1.122	49451	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJCmBA2W19vY82tyh7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
69509.452691	C1DqR04UMgOa9RELZ9	192.168.1.122	49452	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrjPY64z2QBwdKG2Fb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
69666.773035	Cd3AmSNsDJoMwXBu4	192.168.1.122	49453	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3AeTDgCwZKYwsErj,FqWbsD2WTNIDR8Vmjd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
70323.437447	C1cJQI1XOMbnMEFlY5	192.168.1.122	49454	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbzJV31xn4LwDJJlha,FRtaUrkv7r0ZV0Q2c	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
70620.192348	CQXQWD2F9jJLMyzKF9	192.168.1.122	49456	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4GM354RCQLAvnIWje	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
70782.272632	C831pk1cq6y6KP51fi	192.168.1.122	49457	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Ffp1244cUyQ0Gir5pl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
70928.607072	CaMFG4b6FHdMktKkg	192.168.1.122	49458	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FP7tbo4xKaj11Sdr6e,FupZl82513z6bBHvQd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
71573.274097	Cjz6docSpTO0c2zEf	192.168.1.122	49459	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FroBhA5PfTM9mUES3,FsRyob1aJpAMNejuL8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
71842.077477	CasWtZ1bY8WhRBx633	192.168.1.122	49461	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2oiXMDHl9SZNMw8d	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
72002.166379	Ce0tMK1VBCzBQ6M8sg	192.168.1.122	49462	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDB6H60H5rkW9FJ5l	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
72175.500289	CTK2DDChcOV8pobr	192.168.1.122	49463	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5xHH72lKCJslk2Ejc,FelUVE1s29eeyh2uej	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
72828.188309	CVBXlF1lqrTLcWugL4	192.168.1.122	49464	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYhbMk0FtDwkvSq4h,FEzWbpDJ7ASwjyZ5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
73140.657778	CrEQII11uXcPT3DgGi	192.168.1.122	49466	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZkzDD368tLvKp1MP6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
73263.720809	CuIg6i4A9mGZ5xjKed	192.168.1.122	49467	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNc0dM3i4CP9YizaM7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
73439.036519	CvRTOkCgqlwCkg6Hj	192.168.1.122	49468	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5RSqE3AbsEIUu4Q2c,FUT7Z1ZYfiA0QT3q9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
73731.206551	CyMkuD3r7APjYQKIKk	192.168.1.122	49469	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtfLyu285VA1Isw5Rk,FIogdi1FdtQ7yd8GU4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
74018.001531	CICndr31eXCgbvkVY1	192.168.1.122	49471	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXgD7c4TBiMrZ9n7Bg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
74163.083350	C18AtJ2D7bfVTS0rpi	192.168.1.122	49472	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fgnw8r2wJSyeZjOyH6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
74338.399622	CTkv873F3pA9ZCmdEc	192.168.1.122	49473	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAuVcH2GUzbcktNFVb,Fs3HHOrAEkaXKeqV5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
74600.586427	CW3EvX1LS1dfsUprpc	192.168.1.122	49474	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIti7VOvIskrwmKrc,FkusJR3iWIk06pbDlg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
74913.368151	C5RvaeyzTFTR2JEFd	192.168.1.122	49476	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fxp6ZF2ymZS9YEig4e	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
75052.452771	CgzoCs2txjxAauqXd	192.168.1.122	49477	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5kzMh38JjRv209Yva	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
75188.782319	ChdmyV2l4Qpk3YUe2j	192.168.1.122	49478	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWLWhZ2Ir4WcPtzime,FOHYr14Hjb5y7i23z1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
75826.449970	CZ0MJYNRwrLvcaiG8	192.168.1.122	49479	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnWdDk29qnkIoT6Muh,Fd0S7E40ypmGeLbB58	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
76145.245158	CTL3j12dtwJRVBj79h	192.168.1.122	49481	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgIA2v1rfsBSQdRLp	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
76316.359187	CaYXvm1qm261sYvex8	192.168.1.122	49482	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fl5gZUtAp4BT53Lck	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
76471.687063	Cj80kA2dfdfNVTW6wj	192.168.1.122	49483	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0B18a4jkmXmOm2gN6,FOsHou3rxIy1J1ff9e	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
77119.357843	CGa26lOBQwF0ocT2d	192.168.1.122	49484	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FD35tf3uRyl2hjVKli,FffzcV2MlI9azd7VU3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
77422.144724	CNDJQ24VRTZPvpxPc3	192.168.1.122	49486	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fy7U2U180v780EK1Qc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
77593.264976	CBF5M2DVXeH5hUund	192.168.1.122	49487	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	ForvNl4CYqkj6oJgR6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
77729.615448	CITntR38Vj7rc3JPa8	192.168.1.122	49488	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FP5YyF2cl5kKH7QB4f,FI7MPM12CAyM9xipLc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
78051.788562	C9kDOe339f2FpSzzq	192.168.1.122	49489	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcHbkz3UbH5LLk4aV2,Fd9enr3LOBDwcAMwjc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
78357.279623	CAmK0t1iwwA22puNhe	192.168.1.122	49491	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnYJUU3C8heiNeqHN6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
78527.408252	CRz8py3Mph5TiXFfOh	192.168.1.122	49492	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJteaL1fM6u4abRhG7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
78666.760120	C9PdRG3r4ye0AkcsDg	192.168.1.122	49493	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FroHyfhCvZOzp8bli,FCATap5IWQd9oqYEg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
79322.436398	CxwkQO3bshUlipwfLd	192.168.1.122	49494	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Futj9F4XZVUsAcqSO8,FK8Dzy21fx9jnkJNsh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
79654.219141	CwyPKc4Xs0dAKFCqii	192.168.1.122	49496	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F9ISB64tyPnQ2fgNRa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
79803.312840	CpIfuJeZefK4xyNa7	192.168.1.122	49497	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fn4eHW1cwZoB3dJUF7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
79950.638853	CUp3ZG1jfrIoRzi0j5	192.168.1.122	49498	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJ6aGo1NvL5rBgPLpc,FFF27Q2PFVBm0oE1Y8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
80204.804642	CUO51r2xv7opPaaYi2	192.168.1.122	49499	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgRbrr2q0HxFtl4txc,FCQu9F3gI6yw7xqGg7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
80546.569749	C8XtH4f6njwOGQm4k	192.168.1.122	49501	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FkuXjK2pCH281Hwuqi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
80689.637168	CM74kq4E3Gxta1mBP1	192.168.1.122	49502	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5UD234YTXSlMd1ID5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
80815.962910	CWXiT1418L4QkWRQYc	192.168.1.122	49503	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FetZ502puXtIKgO8Ff,F1Gf5v158krvHufBe4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
81360.626428	C7CkLH6xoiREh7lTf	192.168.1.122	49504	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcKrXA4U9QN3WvoJy7,FY7kNn4mMwSDlPwo6i	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
81674.443086	CXHSTF1oZvteH1xcB6	192.168.1.122	49506	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1yCLF1vTgp3mjSc79	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
81825.590211	CQ6QmQXZRyoZ38yd3	192.168.1.122	49507	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqDfQuVoQfyghlSJj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
81950.944724	C0GJYl1OlruIlxREDh	192.168.1.122	49508	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvaimF3TxnA3JzHwHf,FQq5Ii1KkFygcj4eT9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
82257.125037	CPiuCU1I7MvcF2BjPg	192.168.1.122	49509	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNKVUA2ZVY3AdY3wZ9,F49epOPZ4gVaOu1Mj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
82555.922288	CUwMDa1MML2HNCHQc6	192.168.1.122	49511	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3uiQP1XgJbaw7QNCe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
82719.024838	ChvtjA2rToIoIh0kC7	192.168.1.122	49512	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcKlnW3R96oFXcGKUc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
82889.344205	CAGSiO1pHNPsIQshga	192.168.1.122	49513	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMSDTQ3uVs9naZqKq5,F0gMmVQr54eCjkDVj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
83465.022723	CcaMrY2IbLV19R7UHd	192.168.1.122	49514	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FES7d73Zj6PWnpWBu9,FezFC548njDD54dWqa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
83734.794176	CDKCdd1qnwmi0g0Zre	192.168.1.122	49516	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FODZ5544ZbjtiFxTHd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
83903.908278	CC5rHD1UpcoXHhN3n	192.168.1.122	49517	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtUocQ3cSYOqEnVAw2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
84038.235628	Cfs1hc4MrpUedvoN4f	192.168.1.122	49518	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQG7hWVviWgtzgZsb,FyjEoq2WfNvdCNJJv8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
84692.917575	CH6mO61eJI9HCfB8ll	192.168.1.122	49519	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEAYDe3iquz0tGgQI7,Fmn8lY2Hs3zsxmkSYi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
84958.706040	CYpfAG2aDO471ezjui	192.168.1.122	49521	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRBvwq22XQj81D4Gec	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
85134.808287	CO6E192YMZNHsE6vpc	192.168.1.122	49522	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FaMTIw3CE0pAaBOAF5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
85304.135774	C2xeXT2b8WbZbM5Med	192.168.1.122	49523	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYKr6Q2rBzdFnSDhu9,F5MBVY16vvGSOqoYN2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
85861.817749	CS8ap43xPRtfQFbLOb	192.168.1.122	49524	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6mi112qTw2QdjTwS6,FnTl0C1kCjzhqWyUVl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
86215.599760	CMGmDK2KkBcK5R2opj	192.168.1.122	49526	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2bMFtn7zVLGkzbKl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
86376.683606	CCmznA1rcYh3WGbhQ9	192.168.1.122	49527	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNvo7U2vRC47t6v7tl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
86532.011323	CWxyHz4IwnVZnXLYK7	192.168.1.122	49528	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FX1blO2H3Lsgq0sFnl,Fyteqj1eQ36btZ0QRd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
87191.689840	CZyn6f2ElFMfHk3t7h	192.168.1.122	49529	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5rz3N1XHUnBKSvKj2,FyANvDBZ7AVTtsYw9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
87499.480955	C307XG1yYkmVBf8Djl	192.168.1.122	49531	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FeLLlqeVt8qaTOvdl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
87636.575608	CMY8Sm1hwUchkKUZhc	192.168.1.122	49532	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgsQcf4O0RfqJ9uTw6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
87800.905718	CLuB2gObVdmb162Ed	192.168.1.122	49533	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fo7y9Q1dCloIfJJfhj,FvtTO44yjlhlUMHXA4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
88345.578872	CDYaUl3kqG6cIBR7li	192.168.1.122	49534	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRKJ173EfvMnIUgQb9,FNJxpG4D5rdEfojwi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
88670.363135	CmClV4OvONJEXEHZe	192.168.1.122	49536	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgYMFA6WPDzAzAZD2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
88806.447160	CkAtD918NfsvNyKYyf	192.168.1.122	49537	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FktB6U2T6w0AbnssSc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
88959.776740	COYdfy4sEbeijCQpp2	192.168.1.122	49538	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKpVXt3u4zEJEGBxb,F4CswF1JeMue5BzQBi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
89502.462136	CzZH6k4RmhVWoFVBdb	192.168.1.122	49539	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0lXTg4piJIhF4tpy,FhJyhJ25UKLSYD45dd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
89784.254108	CxmITU3aRTKudvWq5	192.168.1.122	49541	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0DgKq4BIxV0RAWcYe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
89909.363361	CK9aj22TxmBVnNWx64	192.168.1.122	49542	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcE5Tb2SHQ7xHYoEHi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
90044.680117	C4X5az3X13h2Lxapre	192.168.1.122	49543	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOSDwL2g39yI0T8yHa,Fph7tGkrnUm7OI9Ul	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
90701.355819	CzLgQ32KAzrYZAAmDg	192.168.1.122	49544	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fgbart1iDqjOtpY9F,FgzExR1OlZ9AyLeGRa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
90997.812732	CqN6Cf21iUFH1BNuYk	192.168.1.122	49546	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FL6MQ54vxZSbgQ5JDa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
91118.851896	C8ybGd2PuuWHkgaIhl	192.168.1.122	49547	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqUDyIBhXGBbKjQW1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
91245.177750	CBJb081P5eUiX2Een4	192.168.1.122	49548	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrBtBQ3FbkXSZKajod,FW94193Kc3sFfm8u09	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
91786.866927	Cgq0k110JyV6oxRCP4	192.168.1.122	49549	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fi30CIPhVhCSpGRg9,FvLa443wuB5paUk5r7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
92056.616149	CoBcer35DaA737nWa8	192.168.1.122	49551	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FSTBq2jM2W6ZVGPed	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
92236.670165	Cg3Qim3lvYrknyfNL9	192.168.1.122	49552	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHDOjt4gxlOKXDwX22	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
92376.002432	CnOv5G4VA8P6WokH3k	192.168.1.122	49553	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Frezrq4bPnwQRz6Hz1,FCtUB14GdVoHojBBW5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
93010.686279	CHjCQ6304759kJsIga	192.168.1.122	49554	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMZVsH2fOw48nVZmZh,F8zarI8I1Vp7tlCQd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
93347.442868	CFj9Fa7smm369Z3Tk	192.168.1.122	49556	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbJ25rqs5YqB7lNC3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
93515.507806	C8ta7EpilEvWkebFa	192.168.1.122	49557	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FczknquF3IUBCMJc8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
93638.839272	CXuEcriO02kcvxcj3	192.168.1.122	49558	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwdegN2WK1Nk3Z2d8c,FB0aYc3oNE2U8MkEQb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
94195.519707	C5mlEI1hW4ZdxOWLZ6	192.168.1.122	49559	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJZgJ62hTGL3dtv1j,F2NSUe2DiijUSLUVvc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
94467.324838	CRd9tN2zMAG1uJDBRj	192.168.1.122	49561	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FyUW8u4llbasQa6Jij	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
94641.416452	CCFF2m3yzZ3p3mk33l	192.168.1.122	49562	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FF6JTo226tjqKLRsLj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
94786.739750	CVxH9s3a0eJJWs7tE5	192.168.1.122	49563	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2bkKf3X8ChZOm77H4,FBYPhLbgmZWMinXq9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
95408.414026	CJxZFE3kfacDqfS95l	192.168.1.122	49564	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fhizmw3rFo43z3eeEc,F3zLVj1LQQJiE9uNe5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
95695.191297	CSPox03ts3bsBEQq04	192.168.1.122	49566	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Ff2ttU37z1gqIWcsR5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
95830.245632	COYzOj2tXn5TMUdkV9	192.168.1.122	49567	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FFzZAW2emyDarrAYkf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
95950.563021	Cp8Hxd7bTd1Xzn9Q9	192.168.1.122	49568	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNFTh82K5R8P9Si6Q8,FprMFLTi3njjNtUml	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
96580.248430	ClDmBx4oq1KhKXnMVb	192.168.1.122	49569	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbMEtF2ltmYQZuVBK4,Fozz7N2p3nnFRHz1Zh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
96856.737930	CwTHpm2mcLEZYqv1w3	192.168.1.122	49571	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4IrFN27IP54axGBg8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
97033.836452	CiSKdX3qD4e5YETogb	192.168.1.122	49572	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMiWRz1V0wteTpAGD9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
97179.159578	Cac7lU1uKFCsVreBvk	192.168.1.122	49573	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5NTfD1KHHdGHSHLT3,FzDeVZ2cFXePE6ssqd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
97728.839907	CFmrvW1yqHOvqiSFGd	192.168.1.122	49574	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3Fb4Q5iwQcFHeafj,Fi9HfO2rowJEqqVT4l	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
98050.302580	CednlfViJLtsToB7	192.168.1.122	49576	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3Jxdq2HGbfSKbaR0d	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
98214.393636	CzSWqt44x9L2DCC4Ia	192.168.1.122	49577	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGHRWm34lzESZ5HZV4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
98339.728043	CMlDyd2KYZUZEX5Oje	192.168.1.122	49578	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8AcaE9c3M7mJdck7,FAewVc1sGjQ1cJiKuc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
98944.397608	CpaDyX1bULCY89frn3	192.168.1.122	49579	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPSCuisBAP1FWOlf,FadDyP1ZlSOTL00LMj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
99250.162163	CLzd7q3YcPv8DrAL4c	192.168.1.122	49581	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FA30lc9aY8IGZzg24	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
99407.218972	C4ET1k2jKFLJVK3Fth	192.168.1.122	49582	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwZu5T3lp6to13czpj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
99548.535902	CKsAWv2q7BRAvCBcpb	192.168.1.122	49583	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FewP2v4HHUHyyPJIQc,FlVYoh1vAXdcGJD5We	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
99852.002457	C3crGLZozvXFwhLEj	192.168.1.122	49584	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fd77tUlhhXqQZOqfe,Fhxg8X3WaMleI7utQi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
100133.797340	CxOWm120kGIcqqVyZ	192.168.1.122	49586	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FtXYSp11k65hssvPzb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
100293.873130	CNeJg34P6dx1GjAd38	192.168.1.122	49587	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fmx6LI3dOS9m0NvGP	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
100463.191479	CaxAQL2bPOg4jDA5K3	192.168.1.122	49588	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiciPDC6qi6XX8trj,F2sCTC3St0ygTbkR87	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
101037.857497	CrFibR1nuql5WL8dK5	192.168.1.122	49589	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFpgKl17sxLueZ1Yh7,F5ct3k42qNz4Rwy3d6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
101317.627380	CgntJd1cefffddZb1c	192.168.1.122	49591	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWwavm3wDB7myruWY4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
101452.679585	Cnem9tnANEFRemXb1	192.168.1.122	49592	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqStfO3aO7TvS83fyc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
101605.012733	CG6hmG0aDJlgggsdb	192.168.1.122	49593	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwwhEA2DdTrBzVubxc,Fc3idd3RhKA28jFpbf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
102145.700625	CcPp7211CbyuF1mtuc	192.168.1.122	49594	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fm7otk36md09yon1u,FyHYmdYSJjTwp4zh8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
102439.489413	Cgsmd21SEUCOBKEXgd	192.168.1.122	49596	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FC0vZ04jqcQRtCGOJ1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
102574.542347	CRgmYh1J2ZTnQyp076	192.168.1.122	49597	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4dNnB2kHaIAcDdtpl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
102717.862883	CabpuLJxTurOUz8U7	192.168.1.122	49598	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLnHS51TGCeYtASST5,FXeH3vJu382d3ik84	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
103355.530263	CEZbbe2miqaHrhwga9	192.168.1.122	49599	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUUkWagCQbm5Hvd2a,FwracZ5H5lglnO0lb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
103638.310057	CpHLeG2zAgaAZLbHsk	192.168.1.122	49601	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FvB2shNoxkR27zYui	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
103794.426724	CTWim32Fxv8ZDfbw0k	192.168.1.122	49602	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fg4swxbh8QQH26Co1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
103937.756883	CQteBN1RsbePBBI1Cc	192.168.1.122	49603	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FttTlp3IUFaV6UeTLb,FHf0CS3TerwJbU4Rm9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
104559.420649	CRJTTe1luoMca4d98f	192.168.1.122	49604	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdM8QG2iaL8wevsWg4,FhFioB1nxTvmbmkZgc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
104877.191248	CZWFe02AXXYfYkdcF8	192.168.1.122	49606	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FS0YGpxVLpcb4mnyj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
105012.267421	CAbFAmKHbrC32jz18	192.168.1.122	49607	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZfSh9bhRqI8cE6mk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
105149.599163	CZzKVE1T5bOQt96E9j	192.168.1.122	49608	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwHFIb3bvYO8FF48Rg,F8ORgQdq3I2aqFHZd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
105805.282559	CDB3ux41hOhpClBngk	192.168.1.122	49609	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaMLuQ4kHikWYPjKe,F3tnNoLDslhIVNu07	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
106067.074033	CMu42CpwuMAC8Xvz5	192.168.1.122	49611	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FoJZj23VhPEbJjyeV3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
106197.141363	CL1H984T6HIOalnlv	192.168.1.122	49612	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrOEtP1hanLfKDjaK1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
106321.474687	CyTwUD14dL2dE3H0Ki	192.168.1.122	49613	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3pAId2NJhglGewoF,Fuxqgj3zZT6036D8Nh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
106959.163127	CFVm4D4MjTjhOygy8	192.168.1.122	49614	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOcLom1X3dlClbnBvk,FS29Ak2I70PitAUASg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
107266.932595	CYjmr32aBDgbwzt8sh	192.168.1.122	49616	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6iv9M13tcTlkUg4m7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
107431.005187	CTGZe02Wr7TCyBbcE2	192.168.1.122	49617	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfyxuM38yZtMCrQn68	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
107608.334234	CpZj0n3qhIl2q6oID9	192.168.1.122	49618	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FK1zow2tZ9KGADh7A6,FNZG0t4YA06PZKYXBl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
107874.486417	CdSVV6GPVzGPYDjvc	192.168.1.122	49619	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBfKrQxU6O8uyznp6,Fue2Vb47azRsrgr2Se	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
108201.237478	CatO9d32ZBSVOERDd7	192.168.1.122	49621	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FW7kDn3RQNblutekQb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
108379.308458	CItDMQ2Ma01Yt9TC5d	192.168.1.122	49622	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdG7453Tt6zSIvZihe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
108558.640143	C5AJoj1I1y5wLayBZc	192.168.1.122	49623	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBzIVs3gxw6Uwzid25,FaohnH1OHqr0fB0Eb9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
109171.311547	CGGHQ94cPWTFb6gLQ8	192.168.1.122	49624	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIkNxw2JEnoK4tRHd5,FNYjfp3H2k1Seg5wTk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
109483.083252	CATDNU1Rzsg3Vvd4q2	192.168.1.122	49626	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGELCooodrvit2eFg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
109619.131245	COl7QZ1q40aXAZidY	192.168.1.122	49627	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPWS3i4tqsCuvf83oe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
109762.461337	C8rZj01D3MXMdZd34c	192.168.1.122	49628	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FApwSB3UJ0HjUHT8C3,FoyPiR11mLu9Ab3ONa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
110095.640657	CtaWao2DbQt1FEycw4	192.168.1.122	49629	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F94k3U3QGHdvQ3Eand,FWrqi44Z2md2KEV9B2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
110388.413180	CZnOVg3HuHplX9zYR3	192.168.1.122	49631	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fh19cuajGYV5A4Ob1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
110538.503295	C9fKuY3JA5RrxfCsZ5	192.168.1.122	49632	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FH0gLo1Kz4Sd4xuvc3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
110697.839857	CYqEyw3daxekjDTlGf	192.168.1.122	49633	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbqcsrQtuTXK3MgGc,FmRheU2CJzBRITuY8f	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
111301.515627	CVwzmx33kQtP5LzTT	192.168.1.122	49634	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxRbLB1dNnCpVHidma,Fmrwy43NmSbTl8iVec	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
111893.510799	CvuBhu4ENdgQTpBGQ1	192.168.1.122	49636	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3Hknw3HXST3n25A8g	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
112026.613664	Clr9Uw32rfAYGn4zFd	192.168.1.122	49637	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGBDSp1cAJnFggUBp9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
112164.935127	CgQdxw10t8EG2kJS2i	192.168.1.122	49638	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAn3Ay4ZLz1j3XOSSi,F9XwXc1RWzOJwZatZj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
112762.615075	C5niy011hG59GYfHw8	192.168.1.122	49639	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2c4Vt3Ce1QOzLB9Od,FX1tWY29HUWZITYeW6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
113073.385420	C47b272wtltEIMHJw7	192.168.1.122	49641	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4mXup2eJ2pn4Aooni	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
113225.476546	C3bYGp37VttGGEFVt4	192.168.1.122	49642	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPGsey3HsJbD4hRlFi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
113347.796494	CZoaPD1AGUDHA0GRS9	192.168.1.122	49643	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQBdc6eclyxOQ8nc2,FzeX8a4gnzaGVdY3Pj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
114002.467778	CvFYCW3TJtaleEzWab	192.168.1.122	49644	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdXe1l4UOpEpULLH97,FAaX9q3ZEc3q922twa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
114307.267710	C022ia1oXfvXCvswch	192.168.1.122	49646	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fr2QnF1ChQnQcs0Zzb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
114432.361322	CIbQp32WaTkICariUj	192.168.1.122	49647	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcdeaG2iu42E9pXtQf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
114590.683257	C8nRF54JIimKaLLhd3	192.168.1.122	49648	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmObEk1Gu0LUT9acz7,FCzjuc3AtvvyIvK8Jb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
115238.354507	CGL42J1PFZ2PATLQPf	192.168.1.122	49649	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5htPR1zNA9M96O6C7,F8thro4XymNWlZy8q5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
115530.121059	C20YQXBodVvmjIxZf	192.168.1.122	49651	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDhd781bydXWTHgRN2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
115659.195309	CZyM6l1RvnEtTLh2Ff	192.168.1.122	49652	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOKXdWS12CSbkjPp6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
115833.540284	CcfvCZ1XEa4odCApZd	192.168.1.122	49653	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTSZGEWtwh7Gng5dl,F9Dv4g3Bgx4QJXqfZa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
116402.207989	CoCyl81SZv72o5YX1d	192.168.1.122	49654	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiDj162jp3k6iqVQtb,FhUOGp1zHWOIqNoQXi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
116673.998925	CtQXqqVp4YzIumzI1	192.168.1.122	49656	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FodvOA48Sfyzh0qUbl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
116823.089213	CByI9K1pIh88qFcEue	192.168.1.122	49657	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJGYoh4vGw8cmFWZSa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
116973.439331	C9qYHU2kr6pviXE5Pi	192.168.1.122	49658	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5dOBn4Tq25Wxs3gI3,FTsXKX1hMeos44y1Hl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
117558.120185	C9wvKa1anb8XEzKROb	192.168.1.122	49659	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoE1iQ19oJjqd32Ra2,FfifL94UjjGW5RuJ6k	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
117873.895128	Cn3y4O2Yb8PUrfBaqd	192.168.1.122	49661	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fr3byA3eYfTDdfHM8a	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
118027.951846	CwPkwA3VlPBzZIhyvb	192.168.1.122	49662	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8J6Oy1nky3iKIc2qh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
118187.285027	Cgtgmw1mWRELF9zCM	192.168.1.122	49663	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3Brse1hlCFoY86P11,FqW9vq3L0ytQUZyAKd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
118809.959800	COypM61K4KuDpAIcYd	192.168.1.122	49664	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkI5Kw5as581B2zS1,F9JCUP1V4mBlpxgRp2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
119054.725852	C2ENa71cAssjUg7jl7	192.168.1.122	49666	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqDPrY2hLpxoj06hth	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
119225.793490	CNcbJ62blnbP9KdYol	192.168.1.122	49667	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FsskER37jy5gXrDnpf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
119351.127916	C6F91QXsJR6PRjLmd	192.168.1.122	49668	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLeKzBO37XIPGIyPi,FPwS0W3QQJ4tH5qCK3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
119652.291216	CR0TYH7G12WjAxGAg	192.168.1.122	49669	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FudCyU3jdBX8NJB7b2,FWdOgXz2peFmPaco5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
119960.068445	CqtE3abTpnfeVykd2	192.168.1.122	49671	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmMpwG2ApQ7CvDqOY2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
120119.127661	CIwPX9zK2Zd30dM5d	192.168.1.122	49672	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUr1sMiLmWNbOjSab	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
120287.444061	Cx3tlK36uQeXAFfrbk	192.168.1.122	49673	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJAYU246PRwA98S1n4,FVEniv2p9y3EZxSS91	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
120575.618884	ClJnwe32Gh7P2SbGse	192.168.1.122	49674	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0XLwH2IiVoy1L1GIg,FbzZPN1vz6JQ9pwad	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
120922.382029	CDBN9G21d2BvnPpwZe	192.168.1.122	49676	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZRDhguYeNlg9Y7Oe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
121046.450785	CCy6ydP3IYvHaflAa	192.168.1.122	49677	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FD3SGE1soNFz4qyI4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
121198.774134	CmilrI3oe4f9ybug4i	192.168.1.122	49678	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeUCVW3j82RwwyZe82,FkhltB1X4lO3gnSeZ	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
121855.448528	CT27dX2HcGCGVYolBg	192.168.1.122	49679	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2I4AH3lzKyfgtmRgb,FIXEVVDK4v4Twi29	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
122200.226475	Crotxe1WWTGx3cDLF9	192.168.1.122	49681	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F59CQi1fRujMjqW1ab	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
122349.304056	CxxKkj1zH2NzUWBend	192.168.1.122	49682	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRStsJ1Dbp2Z62jiw9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
122506.625248	CfcgfJ3yo9AR1tni47	192.168.1.122	49683	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FazBf22dPGp69rvX6d,FNVhw13WiWoz2HqRN4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
123097.294068	Cr0J381DYgzwVVjOO7	192.168.1.122	49684	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fw1y1T26W6EWgOfg2i,FkJneD2zkMgU5Slqe7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
123390.066686	CDw4rI2wHu77EnNl0l	192.168.1.122	49686	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWSCEC1ZJvUe6YC8fk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
123549.129478	CdYFsD4cuXuo5sgWf	192.168.1.122	49687	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9gYEp4rFsWRYIvsJa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
123715.462621	CQec1522Gh5sesek74	192.168.1.122	49688	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6LsnuKQLWpR89Opb,FSAzqF3fiwS6fidWvj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
124015.624523	CmCJD4LhXujVAimik	192.168.1.122	49689	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyVFim4CkyO7hdDqf6,Fk86xe4T2c2KKFF1f	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
124287.412843	C5w6VnF7YQ5TgKiGa	192.168.1.122	49691	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FopXZu1TjDgXJ4ISd5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
124412.520801	CUGdaTuec1adRKqO3	192.168.1.122	49692	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcNArd2etp4W44V0mk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
124541.851075	CZwGqb1j8Xdq2JR5je	192.168.1.122	49693	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtD3xC4xnoOYHf7Lk1,FEJzv04Y8UymH1uKnd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
125102.527505	C5Cg3g08T6RaAhd96	192.168.1.122	49694	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGhwoRPJpNDGyReWb,F2eXwX3D3kT09zTasl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
125398.002352	CRuwFJek4Omn6Ctw7	192.168.1.122	49696	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7F0Lx1loU8d1a7z43	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
125562.063506	CFuEuE1aKK4x33W1Lf	192.168.1.122	49697	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FEG8of1shvvEqpvvvd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
125694.398192	CqS77p23nFVj9rXkn5	192.168.1.122	49698	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fun0ZbWAdVS5qnCz7,F8R3f20mmts9Xemy5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
126035.558493	CYliAo4E6S8tRFlogl	192.168.1.122	49699	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5nTiW2pd1abrMhTAb,FiZbXu3xncKEAOo3Q3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
126362.333647	CC6ZzJ35VOcYWqtzPh	192.168.1.122	49701	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3j8Ro1hstgM8sAz66	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
126533.390070	C41SRDPleCg9AYnR	192.168.1.122	49702	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZnGwm2eJn84XusC71	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
126691.724006	C1s7NF3GEPqxpBup5a	192.168.1.122	49703	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKEm93ZEpie8JJNGd,FN5Nta2sM4f59Wozh3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
127348.406604	CODQGD6p33y1376Gc	192.168.1.122	49704	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUfiIu46Ntm5aSobvd,FYv7BH3mGWZHZrF8Dd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
127633.233687	CsG2Mp8sGTztNHZse	192.168.1.122	49706	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FS1ogBhMciyT0fVOd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
127762.406964	Cz8xhe3YH9OQp0Dd35	192.168.1.122	49707	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0tdiy2pP2wD7BAxlh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
127931.724868	CKqKbE8OTOCazfCwg	192.168.1.122	49708	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FL0roA2GonuAxAN59d,FCS5Cf3fNWklhJhBJd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
128527.391436	C3nrKcA5AqbEklih1	192.168.1.122	49709	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzTySO35JKpxS8sqnh,F0PXCk1Aj6dvEmUS1d	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
128795.917399	Ckm0wE4Ho3v20C7gZa	192.168.1.122	49711	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FtXGbJ358m6ngMLqUj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
128968.050328	Cygmkw1VHQ9ow3SF4d	192.168.1.122	49712	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FU38z625uwAbfHCkUe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
129105.372326	C0HBWJ2X738gZDUL4f	192.168.1.122	49713	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQtktd2URG7JBAK4il,FtCsEK2GU2V1TGtICj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
129658.046881	CGBSjqUXjrogIjsmk	192.168.1.122	49714	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAW9Vk3UYlpFA0rgtc,Fkd2UKPdS0QhhyJPd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
129990.841540	CWMweI3cSZJdFlrQc6	192.168.1.122	49716	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdGQ3TA4AUpP8gGY5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
130152.943512	CUFrl74JqsFmr5eSuh	192.168.1.122	49717	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1pGZq8rffQupGdCf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
130290.275930	CDWFtQ2Ek9t0OPXNf1	192.168.1.122	49718	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfSM7q287HPMsjxVoe,FsmaKT1a5i3Pzewmn6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
130904.949751	CJGT7ZCBfU1GgMoi4	192.168.1.122	49719	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrobFl49h0MVbDnddl,FCZCC534TmWfBxmpO6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
131194.735015	CAihg017Vlq3qtTVe	192.168.1.122	49721	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQK6Wr2pvGuZT3k6g3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
131371.806591	C0FS6k3SKWZVgp3Rnf	192.168.1.122	49722	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FTYHsb3CCOitscf7B7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
131494.136766	CGPd4ztKqZEkAJQm8	192.168.1.122	49723	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FljMiY26KbktNG4iVk,F5MeAr1mKC7VPKHzoe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
132066.800927	CSkoX43ElDYJ8TMBYd	192.168.1.122	49724	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGQO8dyV8LKFyyhWh,FYOIjv4W4My43cShYi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
132344.581360	CykFHX2VBLiLCBQWOl	192.168.1.122	49726	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8OyQs2B9p1JbQqPkf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
132498.676978	CgXpmcaQjOmVkhpPc	192.168.1.122	49727	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F297n04y3F7ouGHI25	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
132648.005579	C57PJB4qQVFBkmLbrb	192.168.1.122	49728	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5BAGk2s4KO0ruKalb,FbYA6D30c0qiQZq2m4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
133237.683588	CFm8Hw3v7Cmdexf8W3	192.168.1.122	49729	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFpPvC280hnJYKodLh,F48qNvob3LHugNApe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
133538.487178	CKeIAomla6R2577ch	192.168.1.122	49731	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrvMVU3FdwbWfq3Jg4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
133680.586001	CddLYZ38NfmZtZE24f	192.168.1.122	49732	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F72A3Ygtx1BTM4Mde	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
133844.906508	CmqBlc32GatJlD8J6j	192.168.1.122	49733	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZHAL64w0xxfnoP4P6,FpOb0eD2KTpJPUgIa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
134464.587618	CEd2qs26pDbHrpsn7c	192.168.1.122	49734	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeRkag1UIpOXYZ6P7,FyCjKJ2GKkQ3RCN8Rg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
134774.084886	C5dPEB2fRerKqqOH7k	192.168.1.122	49736	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fu16Lk2OhLoF5kKDEl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
134933.176933	Ctl3BC4sLFUvv9pn06	192.168.1.122	49737	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhcSe235xOyPMdtTne	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
135095.504920	Cd3EvA4m7TdBR3auW9	192.168.1.122	49738	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPpI4f3109bar6z35l,F6SHfL3x0qAQ1u98zc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
135723.177686	CcqghtwDyhGlwesHc	192.168.1.122	49739	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHWSLU23ssCwBbUB1i,FjjwKc4BaXUf0VRaA5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
136043.962013	CHphxz4tH065J3e7fc	192.168.1.122	49741	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8bi3H3xOBvEuYG3aj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
136182.042513	CTFXj22gO193BVaaE3	192.168.1.122	49742	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FiJzMzSQkftbYmmBi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
136340.365163	C1d54T1CKPvZejIOh8	192.168.1.122	49743	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGzyFi4VcmWRNxXF2h,F9A4h01oZBE4t3X1R5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
136641.538710	CkDNtD1E8nuzIbIle1	192.168.1.122	49744	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FynhxZ3E9bM6VmyyY9,F6A7Nu3oEyjZSm2lK	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
136972.314485	CSILQa3gZtmV44MzYe	192.168.1.122	49746	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzkzBrfCoLIvYx3Ui	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
137124.407623	C4GC382PBIpgfQqzY8	192.168.1.122	49747	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F50sEU2NlQCXUmcjc9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
137250.727045	Cktc342xZcbDYvmLQl	192.168.1.122	49748	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fksbxd4LAKWFuYAsA5,FOf8Gj3mBLSCCSG6U1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
137892.407008	CdWcXw4cLBDIE0Gw6b	192.168.1.122	49749	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMIkOO17lnSoOzgucj,FbniCp33Oc2MvbVFxl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
138158.183443	CLCvPe3HnXo9mO3NH4	192.168.1.122	49751	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FH8yyX11A9GrqulHr4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
138293.268102	C0yXwp1qmI0RV8LDFf	192.168.1.122	49752	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FCeFq32XVRVRYkT12	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
138430.600444	CsODbR2cvRbtvp7Jt9	192.168.1.122	49753	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmklR52hYLgY5bAD9d,FjdCyL2LzSALOkmmOf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
139080.273968	CsbylX1EfQGHRihRi4	192.168.1.122	49754	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiuD6d3ZTGfJg5xqN5,FgJ9Up3UAEwcfAYcb5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
139371.046772	Cn6NJW1lO4RQZ3Aeml	192.168.1.122	49756	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fhc0e0161v6JshDJk9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
139493.123364	CpA7Wd4ksbT19OJOq2	192.168.1.122	49757	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F774au32nY4HoQOYn	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
139655.451334	CuKB6a1qKog04mIQO5	192.168.1.122	49758	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fl403V3Dy2WQB0ON44,F3Zw0m3cpwzRfzJz0f	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
140299.126681	CLjjVp4BRSWszAdVi9	192.168.1.122	49759	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuJd0w2LHhWxNrDIO4,FSFq2e3JyeLBJeVqc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
140623.889994	C7Pya9L0GUfE3fbib	192.168.1.122	49761	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQ4m7m1VHEN48LG0Wa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
140757.962077	C7F0ET2iiku6V5AcDj	192.168.1.122	49762	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmQL691Q5btaYm966f	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
140896.294708	CyJNpm1bFPXYMzWHVj	192.168.1.122	49763	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FULKpK1aRXTJkFrbT3,F6RmCa2IWxQYcCHeCi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
141141.768377	CPK5mo2IEZZtIPSoX6	192.168.1.122	49764	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fep0a31GAnjJ6r2SOc,FRBkYf2JpsOYFyaUoc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
141441.244360	CLTc583FuY6GlCq8R9	192.168.1.122	49766	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWM1KYTdYPSSsjtU	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
141603.307654	CcQehG4SIQ4EK2eMcb	192.168.1.122	49767	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FkXlqI28hwLNKxG7pf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
141777.633051	CNFsOh4UNyMqFPznDd	192.168.1.122	49768	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjJAIH2uLjiHfd3FFe,FgbxT22bYyiBqKvdGe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
142021.793102	Cpp3pk3UscbFZcRIP6	192.168.1.122	49769	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuMquG34cynGgzdh9d,FmRzyeqJKysan2zE9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
142324.580174	C2R3GW1ZShll7Vwala	192.168.1.122	49771	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlKJNv1IVTbJm9VGQb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
142474.670279	CZf0KRIGbvqUuiyve	192.168.1.122	49772	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fnm33b4qOFGCN0Rhbe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
142632.000494	C4fDbW1n7eo0dmgaM4	192.168.1.122	49773	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOhQWb4f9BpJwzc9M8,FrQYL11CF9jjztOFX5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
143257.690226	CmyXVCXMXiAG1IcG7	192.168.1.122	49774	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FE2gKe3OsKsrYyC6x3,FWKhn42Hy8biNpvE0f	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
143535.503597	CRtda11kudRk1Ssv5l	192.168.1.122	49776	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJA2rf2JPeFbWF8yCc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
143666.633949	C1TTYi43Mdm7Hwiqr5	192.168.1.122	49777	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdZ6U84hVlxHaJlKVg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
143832.967235	Czz5Rx4Noe3EZlNuQ3	192.168.1.122	49778	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fwpxik1ooQX3nWUmD5,FICK5V2vMCa28Utklc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
144433.640968	CGweC71sqcEyIfizvh	192.168.1.122	49779	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIvMryM05oa9uvpF8,Fuv9qI2IoqL3HPC532	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
144724.401025	CK9Jcj1dX0ijL7mbb4	192.168.1.122	49781	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FX8FZc2qzw0sCh2v87	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
144898.485324	CsGhCB2v84oPJsjTHl	192.168.1.122	49782	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F60Et66DNqcXu38K1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
145053.812644	CXeS6j4pN0ka375kEf	192.168.1.122	49783	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3eGZl2MOu4X8ou7Ec,Fhf8yN2vuKVcTcshrl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
145707.482530	CGuOKr1ixRnH3mUn2b	192.168.1.122	49784	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIuw7n2N1iXXO75oFd,FVd0wj2VwiI1V5pLJc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
145967.256972	CotPZq4U11u4iPeeAe	192.168.1.122	49786	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fuipdr1dqUq9zyJnt3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
146103.337608	CSdaIh12cVMltqR8g6	192.168.1.122	49787	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2SFzJqx2L7c5sWs8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
146261.668998	CFtTj52Q4p2l2I3Ia9	192.168.1.122	49788	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fu24FX1AjnqNuxd845,FmknwBXr3fnY50TFe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
146814.334084	CSLgbO3TtTUGyw1fmh	192.168.1.122	49789	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FB3esr1n9jQq6Fukuf,FitW2A3wVojwq40fW6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
147125.117168	CDLLC3jScmwpfQ6N1	192.168.1.122	49791	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F48vja3OMhdW72r6M9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
147258.177874	CFAH7E4aPtMgwwnSE4	192.168.1.122	49792	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLTGpm3BjgLYngbwOf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
147383.512463	CJ7pcwwkSSimWAsXk	192.168.1.122	49793	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGQYCpQj2b1rqTG04,FtW7tx4rZ9OOfbGH8e	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
148034.188140	CrR0gZRC9G9VcrgP9	192.168.1.122	49794	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtfX7G3VwtQMCqrVf3,Ff9xqz1Kf56ug3IQuj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
148304.969274	C6yYTg158iEm3jkS3e	192.168.1.122	49796	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0nUkK1Vkur4cjnMWk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
148464.041293	CCUD492t4NdrqMifx3	192.168.1.122	49797	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPcwbN207QA31kD456	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
148619.369371	C56cq92z38cN3yl1m	192.168.1.122	49798	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6TtqM3CzP4fob3Bc1,F28NQg19SfoqgzH9H6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
148939.529374	C5lN0R1Cz8zLNtlBgj	192.168.1.122	49799	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEtcKE46wH3VytDg18,FNBhcv2RcWKZJbuvN3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
149247.309611	CWa4F537hlLWyfVgH6	192.168.1.122	49801	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXoweW1CsF6CzTc3q7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
149423.381208	Chay5n4PnALl27eYib	192.168.1.122	49802	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHLet64IlP5FRCQjBb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
149573.711196	Cfyt892AVbBNMSKSmi	192.168.1.122	49803	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1TMZ23ATc8cnG4k87,Fad9Ns3GPy7T8KW7K	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
149850.899662	Ctywye4JxQEvuT7a2	192.168.1.122	49804	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvlKql4GrTOfITqw5,FYmP824edFIENkpJ2a	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
150146.373663	CXYde24mHrLlgAb2V9	192.168.1.122	49806	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FB2ntXYSgxJnKQHJ5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
150283.467798	COrPuJhneQcUHpRi7	192.168.1.122	49807	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FylT2A3HFePwSn3S0j	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
150459.785657	CJDoNT3bYpImtZF0jf	192.168.1.122	49808	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoZZkBWxX12iRncD3,FL5WGl19urRkyqjXu3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
151038.458151	CXL1NN1JMZMm8q7Rcl	192.168.1.122	49809	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FblWyqwSCgE5bgwz1,FNwatA1A4ZkrjyvNkk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
151332.232120	CdigYw1NdX8jb6KY09	192.168.1.122	49811	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2hP7G1ZsNiCLrNjp3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
151463.293811	CJFifRa8EzjMW1OT7	192.168.1.122	49812	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGiaei4YvOAtXp8m91	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
151633.632795	CfiFz52SmyPXbSEGCb	192.168.1.122	49813	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCOTOB3I8DhpTSSyQi,F6Qv7u3CMugR7Y7dAl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
151963.798444	C7JUnIlJtgz4xwCqg	192.168.1.122	49814	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0izMl1oiEejdnsiXa,FS5WId4LmbI7E4nTO4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
152265.590882	C3ijqp1s4phn1D4zGe	192.168.1.122	49816	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fr0Imh3blcGgsVl261	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
152435.681730	Caixuc3fvxcW509lsk	192.168.1.122	49817	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtTFCwYIf34Ur12od	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
152614.012320	CHe3Hq3EquDhVkfqia	192.168.1.122	49818	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxfpIi9n3qrUM2kvc,FJ5JWK23WPXVHK8aVh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
153228.676119	CCJ98Iej3pMAf6Akl	192.168.1.122	49819	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F09nA52SsrpbvXXcsj,FlE5PD2VFiw8Uhjp8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
153571.153090	CGh5nb2SrYD4njAdoc	192.168.1.122	49821	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRCh1h4lcBmKGdCJe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
153711.225883	CHaygx2CojFp6n5Pu3	192.168.1.122	49822	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FEbqLz20SZJwDi14Gl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
153854.556223	C0saOA3kIDxJEIXScd	192.168.1.122	49823	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FY4OIKPIuSG9i97cf,F8tBZL1Xz8dt50Lv8e	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
154112.717230	CHdW8XIJRik7X1CF7	192.168.1.122	49824	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAb8dL1KdMv77MX2b6,FuzCqQ1MxctJjFz16a	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
154412.491063	CrjejX1ddcuzIhzONd	192.168.1.122	49826	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHBGaf2LH4YnOP0tt4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
154561.538145	CorbKI3qDeBNXGcfUb	192.168.1.122	49827	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FviYwj2itap3CIEot5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
154707.863229	CTKNS5pOmvIv77FLj	192.168.1.122	49828	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqaXmdXIbBt2ijMck,FjKilk32IpR1pF3vlc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
154960.335897	CEcQ0Q2deXN1nOJVla	192.168.1.122	49829	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ft3Pw72RX99H8S2BM1,FIuBOANfV2AolWlj8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
155251.816593	C6VzTpLMQHBEelera	192.168.1.122	49831	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FOTkuB1csUO4v3Zfkc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
155425.911770	CqNWID38uW5CPqw3i5	192.168.1.122	49832	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxVW4e3Aq3zCen28J2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
155557.234218	CBVDt4Wka6lIrCgYh	192.168.1.122	49833	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUBIz84DQ1bPnREvg3,FkfUNk4NCB8fKGYxDg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
156173.901287	CMKT467cQtsNuW58d	192.168.1.122	49834	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FONkjS2nxjkoMHFKLj,FAnCUX1428ahKIsimg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
156495.694491	CO1Tkw3STcdUTFdTif	192.168.1.122	49836	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8ZJSRoWbZEZqN789	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
156644.813939	CtiTrdTwLuCxuYLUa	192.168.1.122	49837	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYpv4e17WLsgX4ea9d	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
156800.141208	CxUiU23omPsDqVBrnd	192.168.1.122	49838	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzFEHg1lmGhJ7TmOgl,FUcES324n1mCxPeyRf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
157437.818163	CviSH94xmgAIStCEm9	192.168.1.122	49839	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWzC4g3ceFA9x3SRQ2,FgpKrD4P7M10vFZcm8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
157786.585112	Ck3J581VovGzqYiDv1	192.168.1.122	49841	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FxYGPw4hVd6a2YAhtc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
157961.628469	CScpxE1nNkNBEipJ8i	192.168.1.122	49842	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F387Wp3KTsmIg7POll	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
158104.957074	CmeYGu1O4to1H6YlAk	192.168.1.122	49843	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKOADE3iuun8TBqZ04,FQdxfa17xCItwHjqkj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
158421.432544	CkLAGx3N5kHRclI4x8	192.168.1.122	49844	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVJFJs32nLqj9tJixe,FnQkNF257kE8HzFx0a	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
158723.197974	C11y4zsjxJZQYNBN5	192.168.1.122	49846	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcSsAg1BzLdYdAJsn2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
158864.264368	CWH05u2ylsXSU0lHK5	192.168.1.122	49847	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F18pNh27n3DAf376B7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
159011.600757	CET00l2RhcgqjiEFzf	192.168.1.122	49848	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1jmis4HDlMGampjE5,FSCjNC1s89XB9YYC49	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
159616.280462	CwyNhv4GKyaK05MX21	192.168.1.122	49849	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fp1Fj9afMDdNXhUT2,F6CfZW2lVkleq07axi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
159902.802804	Ci9pkV28iqR6eUWB0a	192.168.1.122	49851	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcfKoD418zMt0NPmJf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
160029.931251	C6HM8W2KZVj0a78Iei	192.168.1.122	49852	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F149xx14bHeCGwzfDb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
160190.255583	ChfW9h4eF6rweSRUJe	192.168.1.122	49853	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FObAFJEF3XQjHkd2k,FijIjT3c295MdRJ1t	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
160779.944594	CPn7oJ1VT0Djn43rq1	192.168.1.122	49854	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMpHfq2Md7OmVIKpS7,FucJ4d1kh78MLAXVGj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
161060.393082	CqEI0N1hiBEngtAJJg	192.168.1.122	49856	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPeYej3KNAQ2sJPuV8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
161200.453277	CaDh7j1zxQxF4fe48g	192.168.1.122	49857	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FF7z5q18Wn4Nc3ifP	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
161332.787980	Ca6Rdy2oOUgwOGFQt9	192.168.1.122	49858	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3Y5bUevhSqqKKmG7,FgE1AB2JYJTIvOrb6a	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
161977.465143	Cw2XIY2mf6hHGSwtR1	192.168.1.122	49859	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtIkw22CQ8UC5Lp9V5,Fv33B53vMSKuwlWmgb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
162273.255674	CR6PmD4JUhr1rJRSzi	192.168.1.122	49861	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNMuafV3Z4axReO8k	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
162421.338848	CybHOs3Pu2Ttpbsp76	192.168.1.122	49862	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FnCyse4AxFIQnkH8cj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
162563.667841	C5o6UM2ASL6zSjUzLe	192.168.1.122	49863	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbzrRWhIzpx0t9Vs8,FLD5fN3CJlg9gmSTC4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
163127.338222	CEs4dN2G3qaKUhvLA2	192.168.1.122	49864	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAAqd81WEdwBiKh97,FaXKpvN0jI8NpTI2d	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
163413.119159	CgnBPx4uutXiie09P2	192.168.1.122	49866	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpK9Nf3wTeUereJDdl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
163583.189283	CPJHdhpBKopH1Ptkc	192.168.1.122	49867	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3mS8m1ZHVa9qLf8U7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
163714.522306	CAbHc54Ogg9JaUDxu3	192.168.1.122	49868	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAV35A4cjIfX5XIzY7,F05AfQaqKv1hrlb1g	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
164268.198444	C3eW4PdDrFp91KNsf	192.168.1.122	49869	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKuc3r2I18neHq2Wo2,FNeoPE4oUDHFeelJqg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
164600.979099	COWFVzkkuvRYpuXZ9	192.168.1.122	49871	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNa6zT2Igeso05zme5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
164732.061294	Cgx93H36WktryXzXL1	192.168.1.122	49872	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtPYoe2toLBnlRMxWe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
164875.391368	CPvs2N1QLRi6qkJa8	192.168.1.122	49873	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaXQTl3otNvlPosZP1,FbBknv2pS4buDrsn5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
165525.055740	CnYIxb1Rl5hnTTMcYk	192.168.1.122	49874	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSxIDU3JEY4jCVmDuf,FUR5MV3imQHTM6PuTd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
165856.841500	C9X4ofKB4ly9J0GP5	192.168.1.122	49876	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAh3FB3afEGECRcgtf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
166031.950071	COWdtREJy8OpW5xlb	192.168.1.122	49877	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdG05bVvlLeLhL3Aa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
166154.290440	CGIw8s4aYr0YY2kbsl	192.168.1.122	49878	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fu45h51AE1vMoefWZ7,FDq2YYmcJI7A16Db1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
166793.970349	CgsIy62NZOsEFo41a1	192.168.1.122	49879	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfIQRs240V0CGh9La,FG8DXn2A6WiP6kBq8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
167091.754834	CIBVvs41RSTkCeEMw3	192.168.1.122	49881	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIKvg7x9D29tUEuS1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
167247.848122	CGqriI1TKqINNBkbKk	192.168.1.122	49882	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3DK5m2OSsOLewqol8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
167421.191931	CSD8FD2Q6RQJGdlw01	192.168.1.122	49883	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbK3w61OY3AQDJciJd,FQiAqV2UkWzo3FvQH7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
167685.672119	Cs1Cy52ISO0yxP2ER2	192.168.1.122	49884	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLGGYU5fNTYQ81Jtb,Fo6NMx11k9ohEfinO3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
168004.457043	CMxOZr2MBq3GXcz8El	192.168.1.122	49886	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FocQ422aGHdErz3tfe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
168144.527559	CzVi9740y9cwXc8lJ8	192.168.1.122	49887	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fhq1ev2LtYunsiM6m9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
168296.880856	CVFSQSpUJ3W9rpjja	192.168.1.122	49888	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpMEVd4oa4ki0Hif2d,FQSXSx41gbDFV86Dhg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
168884.546158	CaqqJfMtohyJ4GLY	192.168.1.122	49889	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWRqyQiKHa5E2b2ie,FzbtLK9xB4Q7oaAv	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
169201.371306	CU2EGj3CIfVhY2e8p4	192.168.1.122	49891	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgouctpkS5ODUhpvh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
169327.508167	CrLgUn4iNewj3JnoF2	192.168.1.122	49892	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWW4g74zl2DkAGt6li	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
169449.839065	CR5jVy4ST36IBsPcUi	192.168.1.122	49893	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6KPm51h7btXU7R1ab,FMeaYN1pm0qK92XFmc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
170023.513697	CHfdCR2MSD61bpfVt9	192.168.1.122	49894	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOL1Tb1PcZr61LJyZi,Favz7kMzh5zt5Ek4f	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
170319.281487	CqAYlEbPnzoOcGeWk	192.168.1.122	49896	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMucb13eWxLRRgnL8a	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
170480.336031	CHmQda1dxGb3RaBRb8	192.168.1.122	49897	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5A3RT33zXelCLtix	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
170636.675008	CO7DEN2L5t954tSKve	192.168.1.122	49898	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fpv58wQCwmzgguKG7,FyN1Il12UJXxZfBuO4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
171290.365600	CAixw63ODs4JpHrtOi	192.168.1.122	49899	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlYCRR1hPxD1G0qq5h,FiegRP3NswiRjcF1ri	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
171621.154976	C7Aw2128p0SBWIy7Gf	192.168.1.122	49901	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVsYDTxEHfDtSEFb9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
171768.267829	C3Au7j4ughG0JBdqEl	192.168.1.122	49902	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FiIJb832HJAyEblc87	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
171933.589757	CWP31A3b59rUHB1ef8	192.168.1.122	49903	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FC6XIp3YmqOtGW8CNd,FJK5Dy4Ax50xmqME0k	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
172549.275082	CxI5OD3aGlloYeQJY5	192.168.1.122	49904	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ff1oIE2azJqK3J4Eni,F3n3Pj2K6ObI1PKsch	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
172881.049867	CagSGB3GXmu9VYxKdc	192.168.1.122	49906	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FsSYTs3pYXnRHZ9z06	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
173017.161104	C2BaV53x4hKwx9Fq52	192.168.1.122	49907	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcAnPB3hH3v7qVwJyk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
173149.498066	CUzvGg4eCx5Cqbsui	192.168.1.122	49908	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIEAwJ18Y9bCd9pOY3,F0QESo29EL6zbol538	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
173720.168729	C43u1l1ouIlp5H8O06	192.168.1.122	49909	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIejE33ZduTpzIU2g8,Fk9Mpf21wPEFGNv119	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
174006.958572	ClesxU23T7yGNu11kd	192.168.1.122	49911	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fmg5Li4eFTMglC5sdh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
174163.061014	CfS7el2GdqnsLpGTN	192.168.1.122	49912	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1BNVv1HfBuH7cL3o7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
174290.391351	CaZq2EsSMIU6BiNdj	192.168.1.122	49913	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2ISvt3pPgA1eiopH8,FfaaMHwsVgFSDiJhi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
174946.061159	Chi1o1vWzZrpPybWl	192.168.1.122	49914	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSErHn2v87cVfM3qz7,FuC1GB2JouA5XqJX22	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
175229.852435	CVvmu739jMPfxh1Ue7	192.168.1.122	49916	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fe6nFj2FDcwZYwsG63	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
175389.925131	CCxHPk3Mc4HiaRWHqf	192.168.1.122	49917	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fb3aue4nmeTVAUfxK9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
175552.252503	CjKxJX17OAeh1YY3Yl	192.168.1.122	49918	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqecH33OYM4srt0Yud,FHFBk9uKjTZAFGJh1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
176128.932064	C2R9fpqTu3jqjJAq1	192.168.1.122	49919	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9nqIyiMiIuEZQHfg,FaXsG01tnUSCfu8QWl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
176462.724038	ChQ2EU1rJqxvVxrxlf	192.168.1.122	49921	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUVaDQ1Jreu2rh8U7l	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
176599.804649	C0VSWA1ijZuz326et9	192.168.1.122	49922	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FjwHz212E4MSJD2HN	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
176774.129405	CDEDY81gspEcobQyl	192.168.1.122	49923	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4QPOp1Ir5KvKMIxL8,FAFFaN1uFCByXuTarf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
177320.810193	CJNLKz1PDny92Bd5z9	192.168.1.122	49924	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhOQNhR0mxK5VhYQe,F7cmA94khLFZjlEf4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
177641.596970	CsnJOa2Ma0GHsLKJid	192.168.1.122	49926	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGvw6M3E5U2vnVnyMc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
177801.692924	C3i6UR2Ix0FOhfCE18	192.168.1.122	49927	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FsQDdD3uUywcJ2Ue3h	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
177943.020546	CLa2bS1CrgnSxWho27	192.168.1.122	49928	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEkXle2wDq9324uUG,Fsl4cKmorB1Tg8lZi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
178495.684557	Cu8Q2s266IMYJI6cRb	192.168.1.122	49929	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUwl3N3iSGp7mR5Dqi,FhIYN111xwtNgA3TPa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
178802.168552	COLZrh1JvqwETkQPT3	192.168.1.122	49931	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FxN6dt3qtqhtW8Xezc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
178944.245278	CErgPx4NNmjOiShxKd	192.168.1.122	49932	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSPiLb3m5dUUrQP4k5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
179067.576695	COcCd73puV0oRcJE25	192.168.1.122	49933	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYUhQ81PSPNhuYN5xb,FMhO8v1UdabdCM1vSg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
179399.744621	CCLVk33n0Z5YJvfBxb	192.168.1.122	49934	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGc69X24VODgrZCFjc,FR8G7U1g5PW56Klnf5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
179680.530598	Cn7qcQ3y3jwHDPrkzk	192.168.1.122	49936	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FfLCva2Cc2Pt67Afnh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
179829.778198	CtThRu4MbUbH2fgQOf	192.168.1.122	49937	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FFciei4x9z1T9lkjWk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
179993.117484	CjMLKh4E7ppByC2o74	192.168.1.122	49938	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYQosb1KSakln7DSEk,FTaUaS1GZ4ScT56c8j	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
180289.293796	CY44XR37MBj5DhogS6	192.168.1.122	49939	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FI6Vyo324sziKNWD5b,FArq4b4JBQ65weInN5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
180635.090609	CtUlIK1m7NLDgZ6qf8	192.168.1.122	49941	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FOJPPs4R65aZAFzsqj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
180815.196258	C8MWuD2aebDD21lVB5	192.168.1.122	49942	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlnnFSGUYXLTJltI	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
180990.530320	ColHjUqNMhQ79DGta	192.168.1.122	49943	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F995jiPQmgSbGjbLi,FpJ9vV3hHFpQhFewQh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
181586.218023	CrNo8z3yqFYCl96rb7	192.168.1.122	49944	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJXtLc4Wofl6x13gF5,FceIOG1rbZjgShixih	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
181874.010631	Cy6Jxa1MKq6ozXEUW5	192.168.1.122	49946	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzmXtWlQddHSx0Iig	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
181995.081567	Cqg2UD4sAriMJfMh0i	192.168.1.122	49947	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrxbdH3I7YrsR1X6u6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
182156.407798	C9wT9uaUnFkLVcKLi	192.168.1.122	49948	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpQVb73V8xE9oZzJhc,FKF6So4Mk5e6W4Z8z1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
182703.073913	CSqNdV2ZzfLjVzVOIa	192.168.1.122	49949	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6KAGc1vJv90lskx26,FhDwO22imj7vnxKCzk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
182960.859202	CL2bzy3YcAw1Qc7WOa	192.168.1.122	49951	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVL1Go1FpNU1T8d3b	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
183120.950345	CeU8mK31AvUYCxcunf	192.168.1.122	49952	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrMj2Y2j17gEUWyZ2b	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
183242.279058	C1qVQv1PuzOKiJGUfg	192.168.1.122	49953	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyagIkeHJqvtVdq1,FhCqSswAOV4RLTDl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
183853.968489	Cz617JPpVqsIEl8rj	192.168.1.122	49954	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMVjtj4pI4p8wkC9Ka,FEm1263jokpCdra89c	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
184159.443821	CRVZ953Z5DI4rzB1W6	192.168.1.122	49956	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQCdKv39EOExZe71r3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
184280.527611	CslOcd2GGfAKFJ396	192.168.1.122	49957	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUSQMp1wL3TIm6ax3b	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
184453.870975	CnK81A1kZbGXN8V9z1	192.168.1.122	49958	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FL0uWz4PTRhzVXZnbl,FORaXD4In99hfFir5c	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
184712.032078	CNzhLZWbGCnfJj7Jl	192.168.1.122	49959	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvWh7n1acl8nGCX8c2,FEWXbk3jNobzabiNr7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
185014.523680	Cnx7uhExTVh7TDHJe	192.168.1.122	49961	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FoJnFL1RqW0jVxWJHf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
185158.630503	Cw1xWW66MWe0GDPwj	192.168.1.122	49962	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fdlt0k3srFJhhklGw2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
185288.961464	CTm9Or3aO0oHvXqNa9	192.168.1.122	49963	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiJmvneUrMqvDT4Qa,F4LPrQ2NqOXfA3fhP6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
185850.639512	CEa2DG4mrkCeIEVnJ3	192.168.1.122	49964	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHSvVL3FraG6Fw0I4e,FIx8UB2Ohz5Bv8CdQl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
186155.152118	Cu6yEzSuKAQ6rllQb	192.168.1.122	49966	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fw2KL4GkWo1DTCTb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
186280.272679	COKay52l8QAVjYMDR9	192.168.1.122	49967	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F33yno4awRFvNHnLb4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
186453.706531	CVfUkN3s5zEiGVBcfc	192.168.1.122	49968	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNr43g48AJU2CLUE0i,F5CSOg15I5pDUMO2q4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
187065.385973	CAJgKzc7dQyuN2Kl5	192.168.1.122	49969	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgG99x1tJVgE3RZWmb,FF2mIP30YJQr2ZzYRl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
187351.188231	CpaDzx2Oxq5qbrHIo1	192.168.1.122	49971	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6EaUm2VBNsSXH4B7i	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
187484.303965	CegkNk4y8eoGMwVJf4	192.168.1.122	49972	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0dyRj4vt0LXWm0hv1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
187623.638382	CHYWFF3ciMl4yem8Y7	192.168.1.122	49973	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCuCZgcSpEMhPOAEf,FxqDK2478dK2CCNzTd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
188254.325434	CV09vq2PhABE71YNZ4	192.168.1.122	49974	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXQkTy4zv4CySaYa1,FYa0Ni1PI8sKF8CUz7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
188567.094040	CufmGh25ABlZf8WNb9	192.168.1.122	49976	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlgGhg2UcXjSdaDgRh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
188711.187699	Cx3ZUL2GHj5tt2Exi9	192.168.1.122	49977	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIMFKL3mGDScujMJF4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
188875.508125	CUHZJV332JOLqqJ7dh	192.168.1.122	49978	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUc4QG3NFopHW1rKS4,FNUo3t3FnnljnR1w7e	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
189223.679014	CFV7MG3ERZCzlr5N05	192.168.1.122	49979	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzmloJE4aOkVx6Bq,F2rpGy2Ff6RonCg6gi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
189516.485894	C3PXb445GTIsZbPMXd	192.168.1.122	49981	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqBmFD4zOTQGHXq0Yh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
189690.606120	CiGgAtIetS0KTgKQ3	192.168.1.122	49982	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FzZFIc4yjsAWOgMR93	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
189833.936672	ChltYvhKejVs3g7ai	192.168.1.122	49983	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbFXj43ZpTXHIVnXZf,FWLSP42hnSC3fbPy42	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
190383.616976	CcDivHJZSfGUwDzu8	192.168.1.122	49984	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2hzuy42AEjg1YV1tk,Fx5YYp4yGg0aq3k2w1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
190704.371324	CQrymEf1TUxREyAXc	192.168.1.122	49986	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJCaEe2Izx0K9QwHE3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
190839.407907	CuJB3O33pdRC8gvyL8	192.168.1.122	49987	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOgw49esX8bvFIfs1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
191005.731427	CUT54l1yPh9eWZcqs5	192.168.1.122	49988	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjdKMO1Pxlubpczq9,FPkOeg2wHgWGjnGjT	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
191342.895814	CNUjdU2CjcX2kBTac2	192.168.1.122	49989	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDMA0f1AG7iQEAUmm8,Fqah6R1quXjtAcjGNk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
191599.397411	ChauVX2EFIpwQFalAa	192.168.1.122	49991	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRMoap3tWd46C9itXe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
191741.474670	C27vnw34nU2pKtK1Lj	192.168.1.122	49992	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1zXQj3L9ngHMVH4Nf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
191869.793944	CvQHsZ13oX3zIEdoph	192.168.1.122	49993	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcWAdm4yiyWoahFrl,FDAn0C2MsvxXR5MCfe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
192460.473360	CbcDy03O9QHvIn8PPc	192.168.1.122	49994	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4b3jr2ZxSEs1KhRI2,FbKVR425jYaa9KKL3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
192793.273510	CQmsLv3GVXboUw8Zd4	192.168.1.122	49996	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FaYrL72ExHSVNKPOvf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
192963.381602	CrVTuz3bUsgbbMDpn3	192.168.1.122	49997	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfUyWG17Vb9Qb4AECd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
193126.710644	ChGAdJ3dnZKarT2vLj	192.168.1.122	49998	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHsMVO3WbXYj2MApA5,FG3t2f1QT8Adab9Wk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
193675.399826	CIseyV2efEmHiPZpjj	192.168.1.122	49999	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4a9nNf7QGgTcu3fi,Fhwwos31ueoPXIqxxh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
193975.900913	Cj9izG3r9r2K0375b9	192.168.1.122	50001	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXUsbo6NFBfJKP4ki	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
194149.026337	CtJiVg3X2KF37TPEuc	192.168.1.122	50002	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhTQx04yuYUlyFjB2e	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
194324.352595	CkdxXB2LFpVxhUcq7h	192.168.1.122	50003	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBu88c1Qa01rhNT3Dg,Fxybmt1eodbu3KvhA8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
194967.026762	C56D5X1niLxRd2giCa	192.168.1.122	50004	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcYN603s8PjifrV0vi,F25zXE209PLHe31989	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
195226.836373	CWsmMT3z2INaTnAmv7	192.168.1.122	50006	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIeinc7UFmzC4aj98	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
195401.957708	C9F3X119Gd2QWkptKc	192.168.1.122	50007	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMvuJWwkaegjGAKgl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
195575.281391	CDCdEhdcsmGMV1jt4	192.168.1.122	50008	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4kkGX3FFyecLEgWz2,F3IeOc1NClRthDrtIl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
195840.463201	CuIW4xYJLbAxsOVK	192.168.1.122	50009	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FthTb72g79SlnQfElg,FN5oxi4YvvFjAy9GRj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
196485.434916	CNQJe72gJ8Fb1ronZ	192.168.1.122	50011	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwFSnv4VdPf8cvuW4k	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
196635.492357	CDSAEo1RYrF2leH4eg	192.168.1.122	50012	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWiGzc3tok5n6ukwN6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
196784.819171	CYs6Ho46e01lmBOm7f	192.168.1.122	50013	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwVDUM1Qbz5X2v2Tbf,FPxnA74fsIOeyK02Qh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
197378.493811	CjYwaxVWeGGizYdhe	192.168.1.122	50014	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHHDJC4eHNW2FRHhk6,FwY3id2PpaMG4lway4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
197643.280839	C7iQ8Wa9N57F45KUi	192.168.1.122	50016	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fs5zkB2hOs40aN1SW7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
197765.335688	CfSO9A2xR27SAYgWKj	192.168.1.122	50017	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWzg9JTC1NIWCVoL1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
197917.709042	C1eVrZ1YeNzw7UdV3k	192.168.1.122	50018	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXomEB4Iv2hQL0XED8,FRp4g22h78hvtFiVR8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
198480.387968	CfRlPX1ETJgfRwnb	192.168.1.122	50019	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVGb9n1Ym24yRuKIYd,FQDNOj3JJzp7i7RIO3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
198782.863680	CVzZcb1cPmbh5Ww6X3	192.168.1.122	50021	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTy9Kq4LyGjsYaz9Pf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
198911.944391	CwU6EZ11LV6qhkK0Tl	192.168.1.122	50022	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FogAlm40eDYxNuaB44	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
199088.262098	CJCyMi3C1CpcazcqV7	192.168.1.122	50023	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fa8AjK2dMhg8TN1n1b,FCwpsC1vUc8IUPz3a3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
199724.947690	CHWzxz2gYam8zgm14l	192.168.1.122	50024	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZDtrC4yw4nM1wQ1N,F1yTBd17sNeqk7OsIi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
200041.436364	CgJ21g6UN8nBIrCS4	192.168.1.122	50026	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPRiwMYJeRvm9VB3j	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
200192.525782	CFEkLi4azWOZqFBfQa	192.168.1.122	50027	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHo1Ad3hr2rWfEL0P7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
200344.858872	CfslxN2bFLTS8Vdk9c	192.168.1.122	50028	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcyCfIk2LwGyN96h,FJ5RQoMlB0zAmrU89	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
200964.539866	CLKjd21AnOcdlnlOdi	192.168.1.122	50029	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fpg8zc4yqHUaWEIRe4,FhlULX36XYixqLOarj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
201250.317560	CTZzrf3xBt7mchl7Qg	192.168.1.122	50031	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUicK82C5TDpyYGmJl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
201392.400526	CSJ6XRg3SmL4Q4yF7	192.168.1.122	50032	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FsxpMnoZ7VgwOdH8h	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
201543.732299	CMhbZH3WhOpI0fPzK2	192.168.1.122	50033	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FR5mOw3cyKOayHD3Cf,FYy23U3ux1KSz9ruCk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
202152.407895	ChrOZq2flEWzWVjx65	192.168.1.122	50034	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxnauK1SBeMoyjIY0a,FYOIHu1kis4VDwpqje	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
202769.430777	CyDJUa3yPuFbE6G0p	192.168.1.122	50036	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FuhSz63fqBdSm049r6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
202949.581123	CDUPPu2dVFvJqlI7jd	192.168.1.122	50037	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdoIr02tQk6bWtJESi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
203098.907193	CzoTVG1uc2SAthIcl	192.168.1.122	50038	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMVJDKuIQuXKdSH6a,FKpJWk49u6iVwiFWCc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
203698.580879	ClTQgA46n0YT8sAT24	192.168.1.122	50039	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3lTmVOIQfxNC9K0k,FaOLK71NFQDGa8Lke3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
204012.344975	C7hi3H2GURQAirmGHb	192.168.1.122	50041	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJKliF1LGESSppkae9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
204192.421904	CqmdQtMsf9Jtq29dc	192.168.1.122	50042	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcI1ZF1OOiOWU8sha3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
204320.744006	CZJt9G3dyF08CGYbli	192.168.1.122	50043	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLQMbf2wUIxH9OplF4,F0LgMG2YEX4jwZi6d5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
204970.419254	C8jQkA4qufsXcbluhc	192.168.1.122	50044	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNNmbP1vafFtiHMuV6,FvJC9MGDPfoatr2A2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
205246.213873	CsAd0B1LPufMGpHQRh	192.168.1.122	50046	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZMXnaTF1StqXX3Pd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
205414.313182	CbBlCS3DJa34mzFIBf	192.168.1.122	50047	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FAXazv1tIm2Z57FNPg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
205555.630768	CWHamn2ZkeGOBiTPWb	192.168.1.122	50048	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWZBj6ecgC0K3R7y7,FfxoFX1N3LBJGVOePg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
206116.307000	Cf1LUR2sNadVEG4Xs	192.168.1.122	50049	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7uJcO2Bg0jJukJmQj,F0FjM513bNE5ycPbPh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
206419.056054	CeHqeg3qvkaGs4rFS4	192.168.1.122	50051	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FfgX6G1e7pu946Siq2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
206597.113650	CfABuVeLwAWuXUSPk	192.168.1.122	50052	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlxnVE4AwboUM5jwC8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
206750.438395	Cv4YVF1jeeaI3SILP7	192.168.1.122	50053	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3tyce4zX87w1QdFck,F9zIGr18sw9GC78APl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
207333.126546	CPRFSz1QhXgij81lE6	192.168.1.122	50054	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaErqI1VN3EnsvzEF7,F3pUkq3jknTTafe9Tc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
207618.881600	CLQB2I2eBd9REf0me2	192.168.1.122	50056	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFkHXl3NiNQiPYRFCd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
207769.939964	CbZnyb1BENjJFlq8sd	192.168.1.122	50057	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdE6smM2Cp05pponl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
207939.267877	CXsOCA2an5MoVvGQl	192.168.1.122	50058	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlSnVu2p1GrWbk6qH9,FtLlMs3P24btuWSpJi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
208538.950161	CFWQKo2qJiUU51hGTe	192.168.1.122	50059	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FB5h84R4TCVkF5sqc,Ffiv0X2Xh1pCPAUmH3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
208815.712707	CnQTrO36JvzskLMlh4	192.168.1.122	50061	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCdZv52eUHaEE7Vsng	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
208937.759236	CMw5hntJYkMluJHWl	192.168.1.122	50062	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQ31wn3Jj2HJ2crzU3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
209070.093497	CBWICl4tbIlDgRm689	192.168.1.122	50063	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjP3oh3LtIGraUktX3,F8JkjMfULKrTf0Knd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
209661.774547	CxdKuTw6eG1WHAQJ6	192.168.1.122	50064	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvVSA6RegxO6DBdg9,FWTRw84Y96eTYs8u	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
209937.543611	C1ZljE28N5FFHKWVl3	192.168.1.122	50066	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fv5mMs3VJ0JZtD43dl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
210103.636045	CdbZse4F5rZ6p9PxLe	192.168.1.122	50067	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGJCemVFb2Q0uCkuk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
210256.960187	C3kg091KBXrPYI87y6	192.168.1.122	50068	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2o2Dw2ioNFatph3Zg,FwHpDs2yr3g9BtDPw6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
210837.625141	CzLaTVCNIlHA3Dcfd	192.168.1.122	50069	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMbeYn3ZZxg77g9q93,FAYIcv1DerGwJEht72	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
211146.408164	ChnZZo1EEKIojL1gjd	192.168.1.122	50071	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhAgCZsmLdK6hZZvf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
211307.456113	CbD9NB26up6UqSo1tk	192.168.1.122	50072	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfMLYJ3fxziIctmIE7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
211441.783692	Cr55GMmhLE3d1YILh	192.168.1.122	50073	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYjjBM2ZRM9G1sOpa1,FdF5gF1YaDVvCD1hKb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
211983.462643	CFjaH94drLrKMUxudc	192.168.1.122	50074	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIgrQo2hsAlYBMQvpf,FbTWAU2UljLzQZW7m2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
212280.261902	CMT5LE2M1QZfbmV0eh	192.168.1.122	50076	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fhd9yz2xG0Nvjot5n4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
212403.351838	CEojZSJ34YCJsIDlh	192.168.1.122	50077	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fp5EtpvA9GM8dYrlh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
212539.682368	Chc1yT21pMb8etWLVc	192.168.1.122	50078	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FR61iD6gsfhHwaddi,Fuilm92Wfd64nfTKde	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
213135.368825	CEYcdj1ljWV0jW1jT3	192.168.1.122	50079	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwBYxUxdadZoTKOga,FqDrHh2pQ7CyH5a6Yh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
213426.142230	CCkr4G2qwlxizuELEh	192.168.1.122	50081	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhbuVO31MC4j7qYorh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
213596.217088	CHdhMQlg0gfg8YF2d	192.168.1.122	50082	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKp8ME2TpZZ0tj9qUg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
213750.543157	CflB8P2AuFEBHnaJe6	192.168.1.122	50083	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F86XdvEGkXArk2TX4,FLPoV52wyMPlQd4bua	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
214312.230835	CaTsJcUezsql90YA9	192.168.1.122	50084	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXD4Xs4fwGQQpGnnsb,FGb5s04ie4IzWWedHe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
214559.994225	CCYKMe2aJn9sKV8Tsh	192.168.1.122	50086	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMwXbZ26kwNHtPOtN9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
214685.052323	CE6fnPdkAB9ut80h8	192.168.1.122	50087	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMokNg2wj5HKkM3Lv	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
214847.380276	CA3ujN2z7plo8ys2bl	192.168.1.122	50088	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGK7zk14afr2E2TJj,Fvga0U3SbtkxXF8bi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
215447.052428	Cl0pZG3AkTbp5DgiU8	192.168.1.122	50089	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCXDmJ6sfgNwCM6kk,FbAJxe4f8zkcEgizTd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
215762.518810	CwDyuh1vbd21IselD6	192.168.1.122	50091	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FoAtyvK4TEYnY0b59	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
215891.576984	CkeefV20YxuFnC1VPe	192.168.1.122	50092	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6VA6U1ajvPGuLlZ83	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
216049.909172	CMDyyY26pHrcn1aVF2	192.168.1.122	50093	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F05eAF4KaOLG1Y3hja,FS02bk1fBv6y9hJqQ4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
216599.578844	Cyig241NCc4RzkjbB9	192.168.1.122	50094	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVbdYK6Eb8e3jqtn3,FvjKKvmcHMzHgm62a	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
216880.367729	C0O9254G96aXS0YXuh	192.168.1.122	50096	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FvMXdv45SWdRGdEGA4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
217025.468705	CIER6N3BNa9poQuOE4	192.168.1.122	50097	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Flr2Gc15t3OAQvrBl5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
217176.809364	CtjzrP1lsxQ1TMF2g1	192.168.1.122	50098	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7Nekg2hxO3G5qM5Lf,FyahMF11x2XmaRxQ98	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
217718.488392	CA5Svh4euTl939z8Fe	192.168.1.122	50099	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fz1eK649soArkLJO6b,FiwIvuUQoaCjjIDP2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
218059.290743	CC02vG3Nk6FAOpzLU8	192.168.1.122	50101	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fv1RRJ3uGrgAj3DLnk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
218199.415199	Cql6tt3XacHl1cSTR	192.168.1.122	50102	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOtgoh3V00KhDWTKZg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
218370.745957	CmuXew1XnqKSsqama4	192.168.1.122	50103	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fwx2NV1IC90zLrxPHf,FLbhQBRpDx5xfdOdh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
218629.918566	CXkvdwlPVMpUbzBe5	192.168.1.122	50104	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbEFPj4e5BjULdeLta,FlObRB1nlu83nycHRd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
218928.719063	CxQWZaEVvBiMcHuOc	192.168.1.122	50106	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFqM7H1k1cUApX5YAg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
219049.818123	C4eqSs3uOmhqvjAt52	192.168.1.122	50107	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6fZyc14UGk3n29sr6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
219215.150030	CxS0Sb2qG3Tp5zTxO	192.168.1.122	50108	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fgb8ya3A4lJFR4n6H9,Fz58lh2u0M527K3BIa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
219774.824810	C3Drdz11rTgJAUgxrg	192.168.1.122	50109	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnvwrL3RqBNfPnfUfh,FEjAoD3FwnE9iDVpw4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
220089.588120	C2CnAc34UlsnRdpWl1	192.168.1.122	50111	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAcNfO1d0FpZWpUNJb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
220224.637728	CWLWdH3aPit8923aSj	192.168.1.122	50112	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FVrdUl4lqZNpP0p5s	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
220377.961845	CnirR31OzZMNq6XYb1	192.168.1.122	50113	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAUORo2oZWA1vmYc5c,FK0DH74gd1XEWxvjI6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
220957.635402	CPii5R3xIcuzcCE165	192.168.1.122	50114	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNhYqj3ARtSRpKkay3,FUKZCy3PtYkMcVn2g	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
221282.111140	CYfhIBjoewula6tN3	192.168.1.122	50116	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fqiz9K3k84rZWIBD3d	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
221459.202038	Cpp39e4maPalqfFtS3	192.168.1.122	50117	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2hcd922OsJNLq2mQ7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
221621.529852	CwXa3Y1WZSnpCHBRZf	192.168.1.122	50118	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbKhSW2t2n9JLPe7m2,FA8HuB24SpDLNQuTdk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
222248.200118	C8YD671WDop2aWlSE3	192.168.1.122	50119	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9NYt83vQPirsmbJDh,FHLgz5R4GanzvycFj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
222520.989486	CarH6n2yqfPMCz4Eb6	192.168.1.122	50121	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHpIsc2e9QwrDuoVyg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
222661.080072	CGJc2q4SMC12nxcOe4	192.168.1.122	50122	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FuF4w024Tsgf3PoSI8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
222820.413729	Chbevq2C7curJJqm89	192.168.1.122	50123	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUIhbAO9egUpF4pOb,FtXKbM2derPHWvWAC4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
223438.091798	CYDNGl19pPnBoT7426	192.168.1.122	50124	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcpgX1CXYtiZgQwjk,FopWYJ3lYMjPZIuhfg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
223709.863146	C4jKKW2qqJNPyHnK32	192.168.1.122	50126	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQBchc2QrbJWVumR1d	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
223868.946794	CCeAPD1XIcqjtFFHV2	192.168.1.122	50127	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXy8jVqIs7Z823QQ1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
223998.266987	CPRq6g40iXzVbHEtS7	192.168.1.122	50128	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTHuu330DPGy7bWi8j,F64Ov64bRJBWgs4Lbb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
224252.432903	CvAanr1X1TYtlHeuQ4	192.168.1.122	50129	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcE8IB3dHTmqeb2Rs9,FMszM5TOQsGvksGx6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
224519.255319	CKDEcl168GT8PgL6Hk	192.168.1.122	50131	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmwZ6ApQKQl0Mty0k	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
224643.380199	CNnn9yPwwp3wJzcw9	192.168.1.122	50132	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FB26Lq3YCL54ZGJLpj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
224783.706222	CKIqEQ1pPL0nK4Zbak	192.168.1.122	50133	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUDdg33cEPg70FsKpf,FX5WlZ2eX5in233rgd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
225324.394044	CKg1Od8o2DzPMuw68	192.168.1.122	50134	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FK4LhU2NehFRYW6Sxg,F2Z43H1xWYyYIaJny	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
225615.165499	CL1xes4rY1Th13nQu5	192.168.1.122	50136	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrNJKf3TYgyVyTHuR4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
225783.219791	CMBR9u31ibNzs9OYn4	192.168.1.122	50137	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FK9SRb4QVy1b2A5zI5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
225936.533906	CoY5us1qK65n3A9DA1	192.168.1.122	50138	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fg70aB153X2vAgv7b8,FpYVSb35vtVt6jeSF	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
226509.197374	C4dihi4rDUczwaXJck	192.168.1.122	50139	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTRUMF1aTk7PltFwJe,FW0d4N3Zw0B4w4heJ9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
226780.973165	CSYZJf2kKIjOBfV9z5	192.168.1.122	50141	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FusBZp1nTflN7zC4we	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
226926.052388	C3IiJi0kHlyDzFEC7	192.168.1.122	50142	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWDxUB39o3tuWVmRE9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
227070.384280	CNHFwW3fIEANKhxwK3	192.168.1.122	50143	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDHyUe24fFS2VNF3Ld,Fuz9TY1s1eNyOnAxgc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
227622.047664	CGmaM54p8BnwgWNqA3	192.168.1.122	50144	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Faf02d3ZUy4lYMNll7,FAa7tX35za18TLiPf7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
227940.556236	CihP3c2QskCBtSpWV8	192.168.1.122	50146	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FaJAcnDUn5rqR9ZC9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
228107.681345	ClP97239wv6IaDjBhi	192.168.1.122	50147	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2KrSdW2Lg3DCuSvk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
228253.014544	Cvsxlx4vt497XHALE5	192.168.1.122	50148	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRmHW51mkNNQYiCf14,Fbr3E94fj2jqSgkQyf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
228507.490519	CVd2cq41pQRNshCYZ2	192.168.1.122	50149	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0c2SS1hTwFq2vNDhe,F3Tmxy1u1WoIkCFejc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
228750.280518	CeqFp01QlFixYnyAm2	192.168.1.122	50151	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgDJp42PGejA0pSD1j	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
228896.365154	CYbQCw1RwiSUNteL64	192.168.1.122	50152	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMDhvN2v4EJPfRCUh2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
229029.691607	CyNDqgfENL0f0HECh	192.168.1.122	50153	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fj1i3j1m8L093cTKz8,FV6dma3a2BhcRKfWSk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
229685.353291	CpYeDVGfslmCOmv5b	192.168.1.122	50154	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdKpLk328p5gOz7wJd,FuWuep2RqFMG4WFsK8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
230001.132315	CP6oMW1lgLfYWnlgnc	192.168.1.122	50156	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fzmhhl10neRYWpKDVl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
230179.239602	C7TATK2fvFwFbon9Gg	192.168.1.122	50157	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fn3oJRjV71uaS1Eg6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
230334.567274	C21RNp45Qz4WTKJ9xa	192.168.1.122	50158	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fct5AS1yjs2LKW6XSk,Fi1RVZtvD64m4hHXk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
230922.252216	CWezj42X6qvMN0oSC2	192.168.1.122	50159	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCp13p1YS8cSO4pjNg,FqIVsO3qGgDPeB3una	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
231277.753792	CxEQrB1QSWjqJ0Zyd	192.168.1.122	50161	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBZdmr4LHr2WtTj2Xd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
231429.867743	CtXPPJ1B75qSdf4ud8	192.168.1.122	50162	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4ZV7926Lf4vriJ96g	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
231609.200728	C5Ubtw3YlVB9FWXEV7	192.168.1.122	50163	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTaooG1Xr34rexYKac,FcX1zI1vF8irJROZN3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
232162.865912	Cm2QRkIF7UdcFNk3g	192.168.1.122	50164	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5DWe618ATpAQGip71,FeCWaG4k3rpcaTY1tl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
232468.663444	CmFNxE4qt7zMTKqLfj	192.168.1.122	50166	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHdTAgRmlfzRcfynk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
232607.771435	C4G6sa4jRbzIsXYTX3	192.168.1.122	50167	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FY2f3C2BVHY40wQnE6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
232774.104841	CYr4E32afBebO7HDe9	192.168.1.122	50168	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfbMtT3rhSs6iJHYv2,FChd9h2N6PYPl5Zi04	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
233409.790142	C6Am8m1RVq29LwZZ51	192.168.1.122	50169	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDv0QmCKGS9HiDUDd,FH0OGDyAAkSoz4iYf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
233697.584424	CTDMFV10axbIG7RXx7	192.168.1.122	50171	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fmu4nFJ69QtydcD6c	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
233856.667043	CsQFS71sL2JbS1pIug	192.168.1.122	50172	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fa21Z4jdugTqy9Rze	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
234034.997539	C6hhrDKkPncEFhaf7	192.168.1.122	50173	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBQJpS18vb5OWGXLH,FwqbUz2ADVua4OXewg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
234593.661155	CkYDTC35WQ3R4YFJe8	192.168.1.122	50174	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3jcDc1vUTBGrZcAah,FqOPmsdKCgnEsBl5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
234880.437339	CIYyiB3Ag4m6uC6jL3	192.168.1.122	50176	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fss8C92ELNlf824C11	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
235060.509998	Cb9L23pNxgOnmgP	192.168.1.122	50177	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmEjGn4stO3hK55K69	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
235224.837140	CfIBCNRdxEKCE6Y36	192.168.1.122	50178	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeFRQ42E2u59z27k4,FnwRPNE0YpCkJA5g	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
235866.501191	CysZM41VSEbdFXuy49	192.168.1.122	50179	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fu8H7C4ptMYxbLUc8c,FJKwce1NiixwzXX4A8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
236139.263493	CFZ1UU3U9Esuab3IO	192.168.1.122	50181	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTAg1H2e3wF7WFujy2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
236288.323067	CcITY54sHEn2ytn1e6	192.168.1.122	50182	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FvgHpI1vTWmvqn66L8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
236465.652206	CSnVWu3LoJuKo7jT22	192.168.1.122	50183	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPgkLR2grNrRn76vV1,F6ejCL355vU0EbhKnk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
236792.132452	C276TM3ZwQygUgJsOf	192.168.1.122	50184	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F267Qs2FR93J5tSbq4,FId7ze2f5pws5WNhqc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
237086.914866	C6fBRJ1yzxnnVx09kb	192.168.1.122	50186	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3J4wY20BgMyDQAwPh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
237221.004290	CX5BXy1Azg0zypb8L3	192.168.1.122	50187	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUskY9DM2tBUxnZgj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
237352.337319	C1qJUF1KQ5veFcFP1i	192.168.1.122	50188	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJaYKr4hEOslYTWE4l,FfK6vS2ksX9uKZnIIl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
237943.016517	CtStqL1ZuAyZ1AtjI3	192.168.1.122	50189	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjgWY7ZPUdg5ybMF1,Faljux1uKJSq12pnw9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
238243.499870	CMEGtC2bTADSBXEIL3	192.168.1.122	50191	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FOB9aq40qiVAPwL9B4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
238387.591537	CAuKEu1eSxQ4ZQG7d9	192.168.1.122	50192	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJFYhyUiBF7qa9yEb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
238533.925998	CnKncY3R26a6mFuT6c	192.168.1.122	50193	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaPC2L16SRP2QI1sOj,F9bIGrmOohocswkOb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
239119.598269	C5gcA7IZ6hvGlo101	192.168.1.122	50194	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFBlBw2YrMfDQHa75k,FayPje2zEh1kzvTxQi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
239384.097820	CUFT6h3YXKYhbi5Hr8	192.168.1.122	50196	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FU9SJ01VLN5dvKzlj6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
239549.201617	CXzipQ1g347EYxWeV5	192.168.1.122	50197	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FoN2jD3QommWGXquhi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
239714.534248	Ct9UjfZQWwdaUUirg	192.168.1.122	50198	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsGaG13Wh6fwUSL7Yl,FY3gmF4m1lrDZbdWV9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
240280.197030	COtIdv1VUe0sgHjXv8	192.168.1.122	50199	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeuXPg1UbfZ07kOvzd,FeGZtp1ODLcScIwKkg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
240593.980370	CT8Zn54sxVZtCmTll2	192.168.1.122	50201	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrDgp7FzLu3TNilza	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
240755.065369	C62udb3yAQ1IVz2Ci7	192.168.1.122	50202	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxWnKp35liVt1hvcB8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
240932.384968	CZa9fE174ZCOYeiY76	192.168.1.122	50203	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpuvzE4PAQy1FVWJM5,FDE69T1CX65t6NbQy5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
241510.065170	CsEBsk4KbVA8xZePid	192.168.1.122	50204	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FygMeTg0QzP9NJHv2,F8syguzd79OuZ8Rd2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
241796.858741	CvWI6VG1eIhMWB6L5	192.168.1.122	50206	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F9tn1D33EpdU1a9Qji	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
241940.970338	CqSN7zb8ZvZkzr9a1	192.168.1.122	50207	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdBOBY24vjpn9g5vHa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
242089.308225	CaxLqQKvOWwWbnMT8	192.168.1.122	50208	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfRxT22eE2dH8Ea6T5,FQlr1x37tFakcseBkh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
242705.984826	CU4P9Q3Fe9r5TK72ug	192.168.1.122	50209	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FisDMbk56x0H7cEBh,FeLG3I2QE0S0p3WlXd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
242987.750537	CqtdxM3ztNofUnIrq5	192.168.1.122	50211	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGVelS11BpcbaYIXy1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
243162.837190	C95a8b2mtoZ8KlkmJk	192.168.1.122	50212	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FVjTBZ26Htam6fgUEj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
243288.181770	COiGnq2sAby1tJT5P	192.168.1.122	50213	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhwJsT2Hf0jFqzGT2d,FCiSgq17UcmJV11wvf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
243623.353593	CLzEgl2uqpYPFPxMZ3	192.168.1.122	50214	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKJWJk1Ls2PUPfU0xj,FEuftq3ibbYv3DMvv6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
243926.119310	CHM4sd1vvkiglumrE	192.168.1.122	50216	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbW2t92k48t4DFKwz2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
244073.196005	CuHje3SAoad8GEEb6	192.168.1.122	50217	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FzvYvp40QQygCJhGxf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
244225.539617	CKNj3IRF2c8oOLyg6	192.168.1.122	50218	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKciPl1AyVNFZiz2Xa,FYKn7F3YS8NUWOwx87	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
244810.210479	Cpy45F1GLV1ZNFOv28	192.168.1.122	50219	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3v3j036bnYzyOCeGh,FfyFly6KyOHXAuik3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
245062.994209	Cj29YwI1wjjouwqkd	192.168.1.122	50221	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FM1vYcxVDNIW0XZj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
245220.095181	CTQ7BK2NJKY7dpt2U1	192.168.1.122	50222	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5AOxK3hNw3bGwufOc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
245340.432158	ClxNjA19iCvXh6gGf4	192.168.1.122	50223	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1MWGw4rKSAIbE7Xz9,F3BwDc45Zw7yY6CMr2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
245982.105084	CHw5fc26JNVYTdUwI9	192.168.1.122	50224	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHRxTz1UFkxh0DoCT8,FKLGxo2kmJgp5BGfC9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
246296.873612	C4kEjK21LN9LXlo7Kc	192.168.1.122	50226	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FxHU9C1O3eOLzCtQw4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
246460.958740	Csl9v2znhfEk366sc	192.168.1.122	50227	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FsoPi32AX328tydgv	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
246639.289817	CKeB9d2BwdlCE7z2Ni	192.168.1.122	50228	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FagBvA6I6gWbGbdM6,FyY3Wo4IHWrdQscMU4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
247198.964947	CEnfbg2MSB4YLQm9jh	192.168.1.122	50229	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoII9uA1jg2owEfK7,F58bMn1UiLxnhM6Gqg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
247471.760746	C6j4gu4BOkoMCsAREd	192.168.1.122	50231	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fno6pWLCZp2BlU7qk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
247597.843687	CY9dLa4GOIck5onhWc	192.168.1.122	50232	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FA02Yf3psvcAceAJY5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
247760.181425	CkyPCpUPYah2GSm2h	192.168.1.122	50233	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmT0EdY0f49hdGjx2,Fw0yNkLrCY8tuTt34	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
248002.659969	Ce03u92UeucHIQxx0d	192.168.1.122	50234	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPlVUIFZBHHukXXul,FOQqbV2KEjQe9yJGLg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
248303.151268	CVloNLIewRryBOJ26	192.168.1.122	50236	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLj5UjGjRtMNx7Jdl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
248444.240706	CHzmaUROKtrfyhgn7	192.168.1.122	50237	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FvYqMzQSnHhCghj2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
248565.579583	CN7OlD358tdKAH0351	192.168.1.122	50238	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLKVc52ZbMg8YwlSMe,FfbGaC42Wdt4TTsAf3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
249209.244840	CuaJly1IaSVH3P5aX7	192.168.1.122	50239	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FU3GFAGEIhmdb7jGa,FiM7xG22pVZYpaSUKj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
249496.019251	C85uUAKxIRsnM5D6c	192.168.1.122	50241	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgGZDy18DUblOQnl6g	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
249671.124677	CXejOh4rkvj6yRewm9	192.168.1.122	50242	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FV0ggR2p0Wp3h0A3l3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
249798.532269	C0oAQa1BpGIKjedQDl	192.168.1.122	50243	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFvsaD2UlXFwp1UvC6,FGzIJO3ySf8WHV5UT9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
250365.206946	Cbxg3b2kVVPrYY9Is3	192.168.1.122	50244	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgthVR3nJBjTee08Mc,FbMtrH1ar1SzsJEx8a	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
250696.713100	C1PhI924C70jWW3DQ1	192.168.1.122	50246	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPCxBy24DV71hwLak8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
250847.817180	Ca0tsC4WSCcK5VUz08	192.168.1.122	50247	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6mQlIsR6DvIG6wif	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
251025.165926	Cgl7df8vuuYLpx09i	192.168.1.122	50248	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmFsxp3YWtlERlGAj7,FEUCf62eTvoTDSTTZk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
251589.847739	CvkyaA2T9qnW7ujenc	192.168.1.122	50249	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7jC392dA4ZwRXDtbb,FY50Qi1dMgSjN4tG5i	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
251883.358708	CsFTpi3ubr16Bva1Td	192.168.1.122	50251	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIfj7Hq2D25MXXHQc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
252032.469899	CkzkRo4hjZMeiS5f99	192.168.1.122	50252	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQxo9z1bfXFRCLg174	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
252180.797260	CYslCc2OF0cjcitGw5	192.168.1.122	50253	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFSnX91A9rP9a0bH0f,FLWpEv18M8JODLyzmd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
252787.469992	CACGFG3Py34QCbLba	192.168.1.122	50254	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0Iw6G1m1CiVT72CV5,FbyiPe4vuROxS7oso2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
253071.275636	CZGmMX20FvM6wFinXb	192.168.1.122	50256	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1fT6wJ48xVILBtP1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
253210.373540	CeHz0KFYaNtnJnvmh	192.168.1.122	50257	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGKAio4QC1RxD3QrDd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
253388.703932	CJS5v14wHYIilAgIk8	192.168.1.122	50258	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfWjnx21EslhXZUN6a,FPIDf448zhP9sKbEtg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
254004.369345	CaqU09Z90rDlFuhY	192.168.1.122	50259	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1Nuiz1cfNvthYD2Q8,FwkYfR2D3wTSh0onee	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
254301.180674	CyZCu34guC7RA9qwQb	192.168.1.122	50261	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrDnIW3gGFi3g4yt7h	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
254424.298575	Chm5XCYYBfzManiP6	192.168.1.122	50262	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8sW751gpfT8Vzuxp7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
254599.625419	C2pl4c42yhYHqRZT31	192.168.1.122	50263	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fk3Bu413Fli7Y2PXk7,F4GLll3JYdbKbBI4k3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
255196.300117	CFNkfp30fzO0cDdK37	192.168.1.122	50264	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGw6Fb4TrPJMPzlyIa,F9Gxbc1SKuN8yvgzPc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
255511.042001	C0XgV81g6N5BTFFFyi	192.168.1.122	50266	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDeqkM2TA7dbY826Wl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
255637.082594	CSLpcw4owvbQtMZ514	192.168.1.122	50267	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0J52B1sKtsJVolm39	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
255773.413556	CmzXzhIeEc5EcL3ud	192.168.1.122	50268	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKqGFt1dJnAJDcPWog,FrsKeD5pL3yPKNBx1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
256362.082102	CnokPV3OFxdBmIFsL9	192.168.1.122	50269	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZ4YRbYwit22M8M61,FzhP0v4TUQj2phCKL2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
256632.873627	Cq0f6E4ZKm2WOcLSI2	192.168.1.122	50271	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGJJqEghcj2cXoHsk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
256783.971334	C3KObb13dLnxV1s3wi	192.168.1.122	50272	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FksIF32LmfdNK5ei0d	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
256935.293240	CkDIKc2xxG3gkq8WB1	192.168.1.122	50273	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fj3WTBeaT5TKyBzIc,FWTW363ywFk3NkEk86	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
257549.967206	Cx5idG1nZllJeSOWw6	192.168.1.122	50274	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkfA6rfmE51UoovY4,FEmkFr2PbPi0nXXJda	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
257846.755621	CHbr863Yh5FRt0Ld7j	192.168.1.122	50276	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4w1Wk45QXT5rFt0La	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
258015.832314	Cge8UD6cik5GKk5G5	192.168.1.122	50277	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1OeB2i84YJ4ybRQ	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
258157.159952	Cb8djP2LY2shyRgTrb	192.168.1.122	50278	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoO4zZ3KuLdXC5U2Q2,FOXYG6Ph5r0LQxkPg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
258813.824123	CC86CmookWRQl4wS5	192.168.1.122	50279	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fjty8Z2iSR89nfKO7l,FmyuTD3zd6wCSLyWQh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
259096.293501	C6gN3I3yD1g2HJS6w7	192.168.1.122	50281	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0vlWY3QQtHZFMOU0g	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
259241.335371	CX9F4O3lKq6aXY6RFh	192.168.1.122	50282	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4ZbEf1uQuSZbO9JYb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
259416.660822	CXkrnw3EUqTzb9GtYe	192.168.1.122	50283	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCyYgC4ZCasL29vxje,Fls69L34tyJRjtaOdb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
259753.836122	CZqzRz1XxjrSIcVPK8	192.168.1.122	50284	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4HgCN3uqjg6c6Dvo7,Fya8q92qRMnp68Jh45	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
260018.619886	CK4F5JIWSNwEEr8a8	192.168.1.122	50286	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAMgbt0JfulZL39o9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
260170.680820	Csfyh54TeupHxs5ema	192.168.1.122	50287	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FbrXR52JlHXFynJu27	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
260308.012309	Cjo9XP2r7Q0M09w8Vh	192.168.1.122	50288	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FagWjOjwnbTluf8w,FVePRfB1GfTQlKjkh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
260901.685951	CpwyyP9gccdFqpF1l	192.168.1.122	50289	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvEtj211W0iRbuh6Xl,F727dn3GJ58Lzcdhj1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
261157.472462	CADHuk3HbzGHhTFbM2	192.168.1.122	50291	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbGSGx3Rmc8QG4lyJ1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
261328.535651	CpOudw4YSW9hmMub0e	192.168.1.122	50292	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7k57RoFgHngi3ru5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
261450.865546	CkrbCJ12BLXUPTUDV1	192.168.1.122	50293	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKTFaV18dRkSAJnJq6,FDRCIW3LH3CP3XGzSa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
262000.535841	CpirIz268LycfcrhFf	192.168.1.122	50294	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOt5T93Efv8Juz0Tfg,FCerev1goNfNIy9Wnd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
262331.295952	CbmkaF3p0gzTqRKCMj	192.168.1.122	50296	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fr0bN43LgHQAT55Lyd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
262452.381250	CcMv8TtxU9usb9VGg	192.168.1.122	50297	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fxm4Gs3iEPigrvho52	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
262575.712117	CRR6CeAm0R5HZH0hj	192.168.1.122	50298	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fd6D9x43bnzsXzGqSd,FSslvn2KUI2Blg2vX7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
263189.395576	CKKr8H1jT0rwROjsH3	192.168.1.122	50299	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhoNZf2A2E2ua382Si,FUhlZ214ZyRLCF2jef	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
263481.152003	CxtyAW2asbQgsYIfNk	192.168.1.122	50301	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbqBZS1b0rS8q4l3Sj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
263650.203608	CiRfbH1Limgc7Lkylh	192.168.1.122	50302	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FsPTfd3HG8dpq5oOq9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
263772.534002	CI8dxv4RmW3IRbTByb	192.168.1.122	50303	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNGKskTwO26qHng8g,FUONzz2bB6VITDxGf9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
264368.210050	CQjRg92jJ9KKPEaBef	192.168.1.122	50304	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPffHLKVKfSeDOvak,F5RhDC2TgchlV4jXil	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
264671.980253	CyQb1u4Go6XTtgO5f4	192.168.1.122	50306	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FvShbG20D5ksJZ2TUh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
264809.049675	C8lOxI1awznWy0F529	192.168.1.122	50307	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fe1SMPRovq7KVO8Nc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
264970.375776	CH9hJ84GsUZimEsJn5	192.168.1.122	50308	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fw4Zik4c2DOyeER43j,FZHUWOgBiF2cSuCG1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
265272.550829	CHZMQu1ZRlR1VJbTp	192.168.1.122	50309	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgJDYn48HChhHkUecf,FyjzMe22fRbPPFd0de	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
265607.333949	C7uLID37GlLyWssQl	192.168.1.122	50311	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCOZP02VMbeo19Gdk2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
265812.363125	CitLDY1BotguTfwmne	192.168.1.122	50312	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FzrPzx2igbKECRoRrl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
266052.601960	CjXAB62aYsK969FaQ2	192.168.1.122	50313	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcQJSz2SQngDa7m485,Ft9LsC4Xoxx86Uugz6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
266660.285859	CxNDdz3YBYJLxAg4H7	192.168.1.122	50314	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcN8VX1G2O0RDX2Cwb,FjNfhb26IHxCCevZ78	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
266934.073018	Csz6h43L66kPWOQ9P5	192.168.1.122	50316	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FV6KUj1Xtl8U9sWHSe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
267084.230820	CQZkSH34d0C95U4ycj	192.168.1.122	50317	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxOl4c3fnoKPDDoyld	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
267241.562977	CMyxNy9V5EwPF2JQb	192.168.1.122	50318	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnN4Ya2UmAp5nEKVFc,FidaHN3ePNdTCnpqQb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
267838.239419	CmpmpX1fU98iL2lJ68	192.168.1.122	50319	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9ZjaO2GNwv9c6Uyia,FneOiv49Y9CDiTmIxd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
268148.045403	CzHWi64JiMjvQ6Oisd	192.168.1.122	50321	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTCTWWJWSJqYCaVTb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
268269.144835	CDyod23xPk9gisJ3fj	192.168.1.122	50322	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1lTSC1nc6hnt0OYy6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
268445.472346	Ct6NWbABRafDv7V7i	192.168.1.122	50323	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjNxi53N8xlUFR4xae,FKCz6sZE2i5AsBHfa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
269046.146038	Cl4OcK1G2VTZ0asRg6	192.168.1.122	50324	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyBTHRFNs7Gwb47C1,FVwD7e6YAzIBPR6Z4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
269328.949647	CGhGtJjDP3sLDZMb2	192.168.1.122	50326	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJzt2KdyZVHgdNHq2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
269496.058522	Cuqb8YpwdSbDY6Ibg	192.168.1.122	50327	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Ftiykg1ApBCxqwI6U6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
269667.389089	CINw6G1fIaqrjXOR	192.168.1.122	50328	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAwzcwoDPUR9f9714,FiI6M826Z37pnUsVj7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
269923.567678	CUI7g6X8NTokOAaBb	192.168.1.122	50329	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fa1nOL1wzGVOFCy2ub,FIHg6A1uHYZqDM1uT8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
270204.314528	CsoVwH2FaQxieCmBT1	192.168.1.122	50331	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2SpFd4MDquR89o9h2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
270383.354471	C0sWVK1IwEMfk4oyih	192.168.1.122	50332	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKmfZ029Cp4mMsJue9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
270512.684966	ChNV9118Iz6Hd3zPsg	192.168.1.122	50333	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPoqqm4HxwLKaWHnfe,FUkJ2y4RLhym0aMIyg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
271165.352958	CH1ZjU3N3RJMzb5dth	192.168.1.122	50334	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnG39A2mOmR2k9maBj,Fg8KKs398PmqHkadqe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
271444.159124	CfVe632TymvgKAKBl9	192.168.1.122	50336	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQ1HVI1F5EVSAnmUA5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
271621.274333	CWhh4B4VTGCRjeMGea	192.168.1.122	50337	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FpcBot4GWjy43CkIQj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
271759.617793	CUsoyz4ZztG4Vj5hX5	192.168.1.122	50338	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrYC3l2NmTe9VEaEC1,FEaO8H2OwAulURfaL1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
272394.279835	Ce8rOX2plsYfjjuHla	192.168.1.122	50339	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnS9H33xWEbBde7Lwb,FvWorN2LlFEJsBDimi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
272693.775590	ColRDR19LLlXtiikS2	192.168.1.122	50341	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWo7P93MDJg4XQYgck	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
272866.885006	CbR5cT3kyKmBCdCa7j	192.168.1.122	50342	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FCIOtnYPMISjzp0za	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
273030.214327	CDHnsI1ZeDwzhOCUTa	192.168.1.122	50343	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FL6LuQ3RvCN9wu0wz,FtQ8eq24bV06DHaYpi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
273387.378002	C8dFVh4x7CnFu6dw56	192.168.1.122	50344	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRVADz1PxnHnK5NjW2,FjPgYp4lRLk44u56x3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
273706.180512	CoVezP2l7sO7EeMFzh	192.168.1.122	50346	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUrC1g12qNGF7DUDkk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
273877.300921	CW6l7y1D8mSf8oQYX7	192.168.1.122	50347	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5bAEn2W4euJkpiM41	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
274055.638443	C0EwSI3RauRqibikpl	192.168.1.122	50348	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fhkh0k1RUdZO4lt3vl,Fte8rV23u6fF1smAO	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
274643.323626	CocgEj2iHHeWpegSNl	192.168.1.122	50349	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7Rtlu3nRZNXZj9TIg,FZERV3tmhsLmL7y81	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
274940.103029	CpYfAK2NUJHdDtIpw6	192.168.1.122	50351	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FY2PgP2tO6Jxq0Ysxh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
275076.161505	CwAGsuzBUV976pIB3	192.168.1.122	50352	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcJVmn156InLsdOJwg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
275211.491424	CGJQHffio7hINDeu	192.168.1.122	50353	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYa4wd3vL229D4AZh8,FmzPrv4CxzjeJtGjNj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
275814.166940	CiE7etWAQEVqP8SOl	192.168.1.122	50354	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FczArUUFdriCPoxi9,F2GdyhgR947tHACFb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
276090.649852	CfBVFv4xcOWIMYFwlg	192.168.1.122	50356	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5iTd33BT4PAJobWdb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
276249.738792	CblL951cJekCxhW34c	192.168.1.122	50357	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQqJsidE2Zp7GxHfl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
276375.083357	CV1vEn3M7P0KB2EJJi	192.168.1.122	50358	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmY4ko21DKeEeiI2Bb,FBnvwl33U75pHyHgkd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
276719.248066	Cr1bpp160biwYT0T8j	192.168.1.122	50359	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FipIHd1QHPZpafkZbk,Fwq9ce28Fvv7TvHSVe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
277331.225803	C7gDSd1srcjPvvXNy5	192.168.1.122	50361	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4gmBL1LoxVeEjRoJc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
277500.318159	CqzbBFAFChBSwIbn	192.168.1.122	50362	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FpuTctNcmuwL56GI5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
277630.657381	CpQVUD4mOhHpoKUAWh	192.168.1.122	50363	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUjZDQoo8JJANwHeg,FC8AFr3Pg1cIlkYXde	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
278275.324117	CsCblr3V6GWDJQ9nol	192.168.1.122	50364	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUtznc1tySBTBAvyJ8,F55fgr4FiMdQenK578	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
278546.849582	ClRFHp1wbIgFV1VBak	192.168.1.122	50366	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2rtbc1mawjOWUsMF4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
278689.987529	Cslb5z1Y1hN4pJ1Bhg	192.168.1.122	50367	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXtFHTfCEDQOhOTR8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
278852.314927	CNSfQL3kQxr4euDZr1	192.168.1.122	50368	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0LY1c3IOXaxbDhwi5,FUkjyZ1Txq0cT5y1Wk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
279445.988872	Cmzg6mk3m2W9Vnul8	192.168.1.122	50369	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdbYea2MuRK3HjsQQ1,F7NE2V1vtN8EbCmcb8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
279772.764333	CCCGVVKUdyBQEVvzl	192.168.1.122	50371	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdjjqI1yLRhxiGNj7b	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
279951.841322	Ch3apS1qFNHYGMxSCk	192.168.1.122	50372	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FED0dC2Si3dri9U8cb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
280081.171730	CSsMFx2DKjxQ12EUWd	192.168.1.122	50373	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNkAAi4BXKefqfZJy6,FzXwIB2w98BT8hQ22l	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
280710.837585	CbOdThZPZDplh5EEi	192.168.1.122	50374	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXhPhz2cPo6byjC6xg,F2GKMI15vmcXoPXvci	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
281031.633401	CTKe1G1KUSFcHzazGk	192.168.1.122	50376	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHWMdN30sgOfY2k7Jk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
281202.750601	CtWef72hUUlwHP4O4c	192.168.1.122	50377	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FAmaz43BojMM4NK9jj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
281324.088762	Cjc2Ee29Ol2n5nEAol	192.168.1.122	50378	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCqNvI1de7zyORvji3,FtkXT715RviHvfNY6k	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
281926.765848	CHVB373eocn9ggOCY2	192.168.1.122	50379	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FM1QxR3gz16mrTMhj7,FgniAl2iJC5jGGce85	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
282227.541073	Cywunf2eLibSxckvRc	192.168.1.122	50381	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8uMOw3nD0h3WqrnOd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
282366.613388	CI3HgM2Y1bKBQwqg19	192.168.1.122	50382	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQy91Z2ej7g40ujXBc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
282535.941168	Cu3jeBAZbPdu9wsJ6	192.168.1.122	50383	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqB0eX2UmoqwE81Umc,FKLS9C2HWrbiIbddC7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
283146.609251	CwEQnEU8SE9y52w5i	192.168.1.122	50384	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRJIbJ2IzlPpOFuZnc,FXLrDn1yKN1b3fnQZj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
283466.401520	Cu1J0E190X6XblhcY3	192.168.1.122	50386	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCHp274HARBHxtnVF5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
283623.482767	C0KwEs3E89eCJQTXm3	192.168.1.122	50387	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUJsQt3BegGVlihmhf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
283789.823964	CIWDKy1bZSwNRcV8Cl	192.168.1.122	50388	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8v75516DTXir1yy1l,FMN3t634ggt1kKsFUg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
284372.511937	Ck9kAaJ24qLIiKYki	192.168.1.122	50389	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMlGb8120puwCr0C88,F5e1ww4UrTUIZ1tEFe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
284692.300484	CYmJ072p9nwgmrq8l8	192.168.1.122	50391	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2vP8IqIfkEEnPw7f	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
284844.375962	Cco3gu1ijAGBZJnF1k	192.168.1.122	50392	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWHhqUis7bzRXjuRk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
285023.708169	CHMP9Zv3yEJITzxQk	192.168.1.122	50393	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbZJBrPLZTRW8JkBa,Fdyn5d4wKie6FAumf4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
285641.377735	Ck5xUTGgH8mZWr2Ge	192.168.1.122	50394	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fh6agHf4zwwjef4pg,F2CDP42QEF75qkmOe9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
285921.166805	CMjfCX3tkbEyAkX9P3	192.168.1.122	50396	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJjHiQ2VYwvtNY6JY9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
286090.267241	CPQv524ajasfoy3Jug	192.168.1.122	50397	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FjTiUG30ZIT3fRAcQb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
286264.632333	CfKuOA2dzmybstjUU7	192.168.1.122	50398	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0Z8xf3wU7nCXgXklk,FAwbgr3cdjLLcaprBg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
286610.820535	C97kVZ2dL2Stp96cGb	192.168.1.122	50399	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9taeD3Omhaz0uzyef,FKX7Me40tyEm16ueJ4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
286932.588850	CZNQ3o1TO3anUgjCY8	192.168.1.122	50401	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FH9wqh2E0N03HiZy2j	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
287057.678100	Ck8Kat4GOpAfCcTSUj	192.168.1.122	50402	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLeEsMCM3qVdDM3v6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
287181.010093	CyxSLf1o897jjCF0bj	192.168.1.122	50403	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSY3eh4HPurpWDM8g8,F7eZT13W1DIgXgshu7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
287485.187419	Cuw7JCyjeUzmSbeM5	192.168.1.122	50404	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSxSpS1bfzKVmp7Eg1,FUV14A4LC6nj2qceha	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
287774.672647	CUPRGb4ViHpdnna2z9	192.168.1.122	50406	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F61u8W1KZnJPUrzHbj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
287903.764646	C5IvIMFPeSioVIcW2	192.168.1.122	50407	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNxO1lhAEmC7zdqsb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
288077.097976	CzOIzx5mI6tpFp92a	192.168.1.122	50408	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fs8HcJ2Qvc9vykAQXj,Fbo32ijoQV11TLezh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
288663.761817	CdtWaP24HvWVSf55va	192.168.1.122	50409	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxIQGn3iAt2UCbMb8,FTYfNZ3CsRe1LLnBh4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
288948.516257	CCp1MJ3sMOtbtyd4h3	192.168.1.122	50411	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXIXIZ3GQfraGtwUU8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
289085.573965	CyLUde32BMrmikOeWf	192.168.1.122	50412	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fsv8HgrutrTnXHHnh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
289238.908607	CfvdzO39wXjfzjYNc4	192.168.1.122	50413	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1D5Kc2SblqvCmkr0c,F4dJ6b3vaaBsG6jWz7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
289895.592743	CnmAVq65fzOTBXE76	192.168.1.122	50414	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPsU6tC14OiU6HI5b,FBqxhr4ZlfnSsvTHR1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
290196.346309	CI5LQ7a30tDv1AOc	192.168.1.122	50416	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBUZ6PEhfljKKS1Ze	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
290320.389617	CcXcve4fapj518wA8	192.168.1.122	50417	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1nQ9p1yP7oaVFkWLg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
290479.722524	CnQ6yxTbSKx7s1b6a	192.168.1.122	50418	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fowu7r49D8E7VKJ8X2,Fo6pjS11XdXOuq7PE8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
290815.184996	CmXYyj2nPlre1yqGvh	192.168.1.122	50419	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnrFnDQ1pHiqDmV4h,FqWsmY3kp3kqc03Q63	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
291148.962289	C1YZw5Xo2UCDEQ0Wg	192.168.1.122	50421	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPuD3w4s73BGv8ev9g	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
291294.059153	CMfZpx3N7tPBK83Zlf	192.168.1.122	50422	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FODRX74ODevP8sj3S7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
291427.385467	CYdYuN2tNHoc3dTZv9	192.168.1.122	50423	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJm1AM1865EQo0raXe,FyK1AF3j84RZAC30t7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
291982.062752	CgogaE97zRNPv8jnk	192.168.1.122	50424	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrVRQT2OVP97vS2cSi,F094BJ3vrcHyeWEU89	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
292247.864291	CVyows2ki80tl66vpk	192.168.1.122	50426	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbMahC45KvAzlcREog	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
292392.948972	CY4n7slD2VjeRzNMc	192.168.1.122	50427	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJEOZc1s0M4UmvriPc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
292569.277318	CdvhP52Ah9zAmFmBL8	192.168.1.122	50428	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3CRfz4ohQhSCtnNd3,FdHfyc4iZT5aKXsSj9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
293186.965528	CL3IKc4HUN2JorUGD9	192.168.1.122	50429	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUpmOo1NYqbUrCmG1e,FBXOJo3j0PuC6YnjP9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
293454.747856	C91O0X29g9cLDFZOI9	192.168.1.122	50431	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpLiSo1jt4h9KuKS2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
293601.837388	CXorok1ci4v1hfuHxl	192.168.1.122	50432	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fdjuqf2ZCqsDhUfBj7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
293768.181016	CROF1s1RDReWoLG5k1	192.168.1.122	50433	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9wIEk4uURrZRPcqij,FHswQm2LYanqj71QQi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
294314.846669	C9fO9B289HG0GYIREc	192.168.1.122	50434	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtzCyI268uPG2qU7w7,FNf0jmfhG0vUlpr1j	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
294603.307845	CgaJAz3jO22OxNz51a	192.168.1.122	50436	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FyKZw91dTB2LrGGpUh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
294749.377005	CqqwW73ItITqDRe4P4	192.168.1.122	50437	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4WJCe4UMQZLU7xNzj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
294892.717700	CpQOVQ3Nfsjh5Vqgoa	192.168.1.122	50438	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fly5B93asoyq2fS0ra,FAymGV11daCO3oE0Be	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
295458.390670	CzglSypvTKHMSzkud	192.168.1.122	50439	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fu8z5T16OpjrGRWVj5,FvHOHx47g4zmWI8uUd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
295753.189046	C34Z3Q3Qm4XBxtYyck	192.168.1.122	50441	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Ffzq7y30rDn4m4zlo2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
295878.320199	CtF68G43Xc8easGfY	192.168.1.122	50442	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSkg9J3m2xFvCxHm44	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
296021.650715	CTzups4fpPECdcGtO	192.168.1.122	50443	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJfQgz2ly4fgMQ2G9d,FTIXyQbMurKRaXjFj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
296585.331248	CBEBtg3I27zGeBrgXb	192.168.1.122	50444	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fswepx2nRmyoU7Jwk3,FxS3zS7XS5OsJii09	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
296917.127637	COn0QD3GGsz5YrIEff	192.168.1.122	50446	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5Lo9N21ogeFKhXV64	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
297048.243163	ClcBpi2OLQO8Vdy4Fl	192.168.1.122	50447	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3KhOr3jam9kLqOfQl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
297173.587402	CV7MPL3CJ2lAm8Uorh	192.168.1.122	50448	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEw6pQ3TQHRmwEYVd8,F63V4f3GrOZyslopp7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
297808.260077	CT5kbz4c2cskenfim2	192.168.1.122	50449	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlJuYwiZQ8NmF3TM9,FTEWqeJpoC7n6ECNa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
298102.056900	CyhQ3o1rBvK6duswyh	192.168.1.122	50451	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FkjieD1z6uPJOgj3Wi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
298282.167532	CqWzcW3CpsmecwPPN4	192.168.1.122	50452	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdqtB4uw9kvxQN254	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
298418.495586	CDfy5q1WqKRczrFoDb	192.168.1.122	50453	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F15InPRtDLlySkChf,FrKntM1XxRSkJtPuE5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
299032.169286	CgIaZT1ip5p7yVsQR8	192.168.1.122	50454	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYCnTo3Dw8atcvlZvg,FqzJJD2bnalA9TDSO4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
299299.979052	CmEamJ2GOYkIX6koUf	192.168.1.122	50456	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAKJmD6ijgYdYOGZj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
299461.095431	Co7dKe2dWaTCmEhOmc	192.168.1.122	50457	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNwQDVa9f4hLZDARi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
299602.429302	CXNWDR3zcY4klBh312	192.168.1.122	50458	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVcZpybkOnJqNKuSg,Fgxcn64LCGQ4SDHFz7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
300176.113846	CO8at8wmO3vQ3QUR9	192.168.1.122	50459	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoiBWpaFSF6vZbzhh,F1wjtB3jqfGm7xrzYa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
300517.879700	CY39MU1uiRWuSjAucf	192.168.1.122	50461	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNDNe311SMuu72Pn1c	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
300655.979338	CwQJPO3u3eyet9Ust7	192.168.1.122	50462	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FVhRy83hXC2ikWNvF	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
300835.311481	CAEsNX2YomjSkF9Fng	192.168.1.122	50463	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fm8owm1YL44oVFjbe1,FZkFDq3rwECPAwc1Y2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
301165.475949	CGmB9p4tjwPmeyMvcg	192.168.1.122	50464	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQmnBd1Li3AZAEnSP3,F2tF0t3SeLBLPIzDq6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
301454.252860	CqEUMT2hImKZOpHds4	192.168.1.122	50466	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCrIpG4juthvlVk2C9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
301610.361819	CsdhPO3NaJV8y6R7Tg	192.168.1.122	50467	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3lWdv1ILF2REioejh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
301740.693701	CaT81D1aOV4ZSHfFwk	192.168.1.122	50468	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhvAV90B8Xo9jCEa6,F5cq6P1JcFikxjpYZ7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
302315.359481	CE99G83fmlDqXO87r8	192.168.1.122	50469	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYN9vS2FrGPVeps1Zh,Fpi0sv2iKtuf2V3cbh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
302621.185603	Cip06VMwlhCNLZTXi	192.168.1.122	50471	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLDXSJ3FEnqQnyPjbj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
302776.317740	C0vk3C25nfi5us9rQ	192.168.1.122	50472	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FTzz4c3dJOXHMSxIBe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
302897.656750	CrnBry4Zie7CgpgfFg	192.168.1.122	50473	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXGzgf2jYyGCemVXR3,FEPhSW3cOoRc8pzc5c	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
303510.328006	CQFATI3SbVyieEXkD9	192.168.1.122	50474	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0EuOA4Df7hqIuBE9k,FtO5kt1hjDO3nRcMD3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
303835.084751	C6Yzy71EIv9ovI3Lx4	192.168.1.122	50476	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FfiIjE2A2jqxJZ4bW9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
303997.133143	Cc7tb31C18Nzsl7F48	192.168.1.122	50477	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfGDCp4CE44MMglEce	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
304167.463113	CEfjcG21N5EUWgsrg8	192.168.1.122	50478	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1gZzF3L3L68lbNGB,FgVYN42snQ5qFASWai	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
304821.152264	CJjsAJ3qem6RIVU2P7	192.168.1.122	50479	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5Rjba2eURlYmhXNta,FrnxLC188hAVJzhvN7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
305160.967367	CWNVKGtY3bqpu9bsd	192.168.1.122	50481	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJ1aNd6Q101o7rTM9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
305314.076531	CfcMt9HFvb8dh26v9	192.168.1.122	50482	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fvb3CF1EQ0YgSEskb7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
305466.410284	CeoWd12buXSKsawjxe	192.168.1.122	50483	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6vyoa1zFZ9SfNfYn5,Fljz0F1jnHOxCQQFPb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
306054.085443	CojSvI2hM9B4E4sjxd	192.168.1.122	50484	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ftu9g01ywO1SEzBcd7,FFsLo72FAY27lCiH1l	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
306348.896152	CwpBMm2ePPEBrOvcHl	192.168.1.122	50486	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJJSMdWNDJ8nt55g4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
306502.996174	CV4Vlq1teZWAcMiq8	192.168.1.122	50487	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIz23w3oRMBiiCAjO1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
306674.329518	CYlwQPv7hm7oRuWXk	192.168.1.122	50488	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzG3Hp2cFyHSiAxcP4,FLsbJj2vt3CARVWZNh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
306925.508123	C8352y4jNqY2iXEv89	192.168.1.122	50489	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdzJtD2cxp3ofwpsAl,FbhQOs3WZV8AeqR5td	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
307245.981316	CNMnjJ1qfvdVeODQS8	192.168.1.122	50491	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FsLVfB1GKSvopumqXb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
307419.053912	CvunE230jjdLfzkfT6	192.168.1.122	50492	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FefoFO1O1docRFBJ86	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
307553.431411	CimEva1ArUW2PiUDPa	192.168.1.122	50493	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkSpbp2e20Y13ij77a,FEB3gM320Ju4hiyASe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
308146.112835	Cay67f3r3WDn0s4d04	192.168.1.122	50494	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsU5wub1pzdwfttnf,FqliYs37MNOZrj2Qv	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
308446.926483	CeGfyo23ywOLeuLs7b	192.168.1.122	50496	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6W3iT2VsbXfoyQyJ7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
308617.075748	CTMJTR1YfHH66pFcN8	192.168.1.122	50497	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHr84w1BRlTNU7FXta	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
308786.414454	Cosh6Z2Gpe9j2da3Ei	192.168.1.122	50498	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeCKkf2OQYCgY94Upd,F2KNYtKdthI6pD333	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
309353.098312	CozFlq3aaNa45L81i1	192.168.1.122	50499	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4hyzh1jmR0GTO7ui,Feagve4hA37ejkox76	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
309677.869483	CnMTPQ3WVErKANteZa	192.168.1.122	50501	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1R2to1oqNr8foITwl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
309821.927901	Cdp6xO1IDM20oF4xE	192.168.1.122	50502	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fd4vCi1wJFLQNss3F6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
309958.258526	Chwhkl1gmbM7fPJIsc	192.168.1.122	50503	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FghW2P1OtLkGdxesfh,FNiG6m1sOsqA7sJSsl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
310530.931902	CDDZqs2nD3pDvmr6Qg	192.168.1.122	50504	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKd7rO2GCC5A7ubm0k,Fg26mS2d1Ma6YnRN11	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
310822.719595	C95yMX3HqEAiijUd	192.168.1.122	50506	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FxgVPrny5dTJZcMo	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
310979.813671	CSd5pI1EkMgjfV30M3	192.168.1.122	50507	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhjScD4iaTBjc2ZPAe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
311119.157478	CR2SJFT8qk1cisyLf	192.168.1.122	50508	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5AVRk1xREwimEWv24,Fom0xj1XlUdBsMi2F	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
311724.828868	CquN782pEUH7MZjQe8	192.168.1.122	50509	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhbWWbEZcRqiFR5ad,FQ4Zfr2rpw6vIpw2q1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
312028.611204	CuKGjS1yGprjUaZCLe	192.168.1.122	50511	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpMXErLarF1r7Qo51	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
312157.686555	CmMf7A1gXHBCNAoz5k	192.168.1.122	50512	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FkO2Ej5zqlEybGiHl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
312279.035067	Co3m2V2wBT2XwKT5th	192.168.1.122	50513	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBkvIp2uXUTz2SQBP2,Fj09X51kP1zaNW2qOj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
312933.706614	CcY5xc4YTmY3moL139	192.168.1.122	50514	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDqtKA2NdkXMjV06oi,FhtaEi1tNFuwzH6uZg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
313223.186836	CpQXj145mq27mToKcd	192.168.1.122	50516	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJBwAJ3MU7nvde7A6c	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
313366.294280	C2cCU722FX2EGz9skl	192.168.1.122	50517	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fx0p0R1D76ZHZkMNFf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
313511.627654	CvLjwN22N9m65puKFd	192.168.1.122	50518	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLARIm4gxnlV15R347,FDZfoy4MnhkfOblRba	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
314062.319301	C3XtKy7W9Eg91eFyb	192.168.1.122	50519	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaWIXd2e2Bd19dTs5e,FKZAOL3syobFRvo7tk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
314408.103607	CVlTBumUvnk8ONzqg	192.168.1.122	50521	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FuWyAU2NepSPz2hApc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
314557.186602	CqGyFa1vIGuOxswCCa	192.168.1.122	50522	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHDzXq31XuIzs41QK6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
314683.532354	CcjJMx3gmDFjDGJjzf	192.168.1.122	50523	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fx0Ep4CebD3uH6n5j,Fb6uzo33ieyhFwpEda	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
315297.214642	CJZT9y2P6M3CUCaAFi	192.168.1.122	50524	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGQH3F1ztE9nB96ave,Fch40o3d9p1ETsybsc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
315583.007856	C5sQcfHMtcDajvy23	192.168.1.122	50526	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FtOVSI28gwxqK3kNYe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
315708.101015	CDzPNZmYp1zaxuGb7	192.168.1.122	50527	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4f1ILPTfTpPHlljf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
315834.437683	CRGUVK3SuygVjFj7Xk	192.168.1.122	50528	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9i06a4qEueQWF44G6,F1uRS41SkGZ5BhR38e	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
316381.113066	CMI3ZI21cQU4TnjfJj	192.168.1.122	50529	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FO8h2m1S9FEzr4tpg,FU7neS2JyclarG8ik4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
316686.905491	CK1eIpIRoazyHXptl	192.168.1.122	50531	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6cAz625L5hidihZW6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
316835.972793	CDmClU14nmZuDzfzvh	192.168.1.122	50532	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGlXD82UjRwpi9681g	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
316985.301689	C9l4Bj2FOhjVfUFce3	192.168.1.122	50533	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fi6Gw13LUbsQCRUrIh,FHn6Qo2VMDQJSuuB4a	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
317546.979534	CkzQjG1seN4Iyfuzo5	192.168.1.122	50534	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdoGtf2sSSOaMuztd,FE3fmj2dWh9GvHv8Dd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
317827.753485	CtOvcd3GkJEt2bEYGh	192.168.1.122	50536	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgmOPG1Fj2az43ie8i	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
318002.831008	CSR5fYo4BjDzVBMRi	192.168.1.122	50537	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3vC4w1g9MzIMsE2Mk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
318155.163640	Cv2TNm4cOqu6bIw74i	192.168.1.122	50538	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FX1RPm2IAOxxpcRBt,FqyVA233NSmzpo7Ec5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
318705.845568	CmdHtBZPTUKFF6kT	192.168.1.122	50539	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0LX8K3kgpSFXM8IEk,FyzGyR22vdjSz0VMlf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
319050.651952	CnURf31ZG2Lzrm5rR3	192.168.1.122	50541	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbhhuZ2kv6ocq0J7ze	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
319206.761677	Cf4Dz5vlASKdGzn9h	192.168.1.122	50542	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FEBZ6Z1pmfWqYgPE1g	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
319370.090321	CriEBs1onixn8gB0G7	192.168.1.122	50543	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F97uHlLAZM2MWkQFe,FzuXQy1ANP5UMTwQS	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
319655.260519	Cd3mKj4OmP9BHu14t6	192.168.1.122	50544	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0jj1w40t2MSWxwA7k,FsV5td48KMNCdATnV6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
319998.747006	ChJEU71sL85CSvb6xf	192.168.1.122	50546	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FaKVAMapyWvSiYiyl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
320140.834291	C8C2uw3Ml8OV4t6Z02	192.168.1.122	50547	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0FjvZzkbz9TfR797	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
320286.167511	CSVp7gTNu362etEAd	192.168.1.122	50548	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPzNNf1tHDfkV0yt04,FWtFT317v8889XmQve	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
320941.830415	C9TNO033oRBf2BjnJ6	192.168.1.122	50549	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSKy1UCAp5mkembFc,FRIeTu3tPC0HPJXFil	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
321239.622755	CRK4dUrULIZSRY3x2	192.168.1.122	50551	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FazSg3szxHNYmfFb7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
321419.714240	CqY0gr2U38LXVHzrjf	192.168.1.122	50552	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FAE3m52UkRbl8out1f	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
321554.039196	CnEb4ujKql4wQZqF7	192.168.1.122	50553	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRZEO02eQJrgoeoLth,Fq6r292RDYbUHa8Jib	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
322156.707180	CLHmhm43v2aYSMt1wl	192.168.1.122	50554	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMmuBv4Vy9nqEvsKr,FhSR5D3rOQjHZwnqh4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
322513.501224	CCLNxIuySv1FAk3ah	192.168.1.122	50556	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FeEqj5mf2KYOu51h7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
322689.579183	C0aQet1OgRXKfblzR3	192.168.1.122	50557	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIx1lW2Q7qtfnJMAT3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
322848.922327	Cw5jE14Viu2lAYvik5	192.168.1.122	50558	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F11lsZkAfinipYUej,FpbvrA3UZjXmHZZem2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
323163.094118	CKS0jI1ldMcOCriis8	192.168.1.122	50559	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKrLJn4kS6Hem0xdDg,FGhjFW1aHvA7aQqqz	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
323476.896482	CBZXib2dxxpFdpNd4g	192.168.1.122	50561	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZWfxW1ndAvzGNrR9g	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
323632.996248	CGkuAd3AxekkuapWH1	192.168.1.122	50562	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSWQPy32PgkNmqrP0j	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
323793.320242	Cllvi22rBsJrtR0M1c	192.168.1.122	50563	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7KfZC2Z2O6GKYZzMf,F5hXht25gtzLDTVNEe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
324375.997922	CBIrl6kJgadpxjip6	192.168.1.122	50564	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDXX6o1oXXnB6AtZ3c,F8RSgy2Q9h7mmsSli8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
324629.784805	CZl1qh3Orsuwi0J1Ll	192.168.1.122	50566	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlhqpTb9rnBCRE5ga	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
324789.868672	CpZ3Ll1ezJlzB6WsJ7	192.168.1.122	50567	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrXb7wfT6OTCFFD54	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
324953.207882	CwBB5d3a0EonxZ2sn5	192.168.1.122	50568	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4iFEHOkpr579FMX4,FI2ML96UAwNmozPr7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
325591.886539	CHdaTH3gT0JGpTo4xc	192.168.1.122	50569	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F81xxq341ykANpSW17,Flcruw3mHtJGrdk7Ha	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
325945.700806	CUXvU21tGgWEFQghvl	192.168.1.122	50571	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVS2VI1Qw77iWtk9Tf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
326106.822460	C1eaH4k7nyloNUWRc	192.168.1.122	50572	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FyUQa21YWDVMwpTltg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
326280.165568	C3WKgeCnDWCtC7Hu4	192.168.1.122	50573	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FH0Von3bDSpSUy3nB,F0r84c3LjSwaBB1au9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
326822.835934	CeW1fi4F8YNAcadyy	192.168.1.122	50574	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTnreo2fQU0KmYLpEb,Fd0msq1Bt7VxT2uc6k	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
327093.618086	CsBNwE4OKk0vhEA9z	192.168.1.122	50576	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJaJC83BIONgfwlACj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
327222.696793	C6UvkXNGbynHILRbb	192.168.1.122	50577	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FN7F3C4aLBKuTxij4j	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
327350.024666	Ck7vfi40Gul6ELft0k	192.168.1.122	50578	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNjBqcSxfFssApE6,F9NtSZ2MNoaQOkjIL9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
327990.695158	CfmjRb1I9HTZAoGsSj	192.168.1.122	50579	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTSeSatebCKMZKKc,FN4Oah1ba1gzxPq5oh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
328297.457560	CQuZVmAOfsHtO21qj	192.168.1.122	50581	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZMPgc1Pv2lSIPTH3i	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
328440.507734	CzOJy13QzaLgm0jT8c	192.168.1.122	50582	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FvDwrz3F3mtad2RKy5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
328592.840801	CRiP1g3hTqjXs25sG6	192.168.1.122	50583	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVJ2DF2rkNz8lqC4fb,FlGiss1z14FxnBED4k	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
328917.016993	Cp8CRC3rlOKiTIXLQh	192.168.1.122	50584	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fkl3Cudhihz9lXJih,Fz1rPy2zq6skCaiMR	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
329184.787303	CbFhbU3ZejvtWJgvJ2	192.168.1.122	50586	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXPD084yCiAtkC3T8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
329349.875089	CA6mcqMPCgwU8iVnh	192.168.1.122	50587	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqdFrZ1mnFMUfh5t8b	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
329526.202590	Cge7213IdRpIHIwxed	192.168.1.122	50588	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fczz9I1E1nLQy6K4vl,FBoLU91tEwoPxEyZJ	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
330118.874895	Cqmlgt2HQAyTVAvf0k	192.168.1.122	50589	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLDIjG3e0WTcm3NrD8,FuWtoT3pVZ48uGJhPg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
330403.680015	CEdNd53KmNoYMMvzvb	192.168.1.122	50591	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6M7yQ3Ms2XfKlluPd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
330531.794035	CXRlH82paDp4qFvQm2	192.168.1.122	50592	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5Hjmh2ECM22BVzuA5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
330695.124061	Cd5VHN1Mv8n4IsxRJa	192.168.1.122	50593	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTNNwY1aHNlcTV0xP9,F9RrVn2MqeHCUURmJ8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
331294.805966	CZElXN284MDeI5a0i7	192.168.1.122	50594	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRUFfq1U5Kb0wT4pxh,FLNntrlcQofYA58e9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
331599.580262	ClmDUM3U2RsT0sRgja	192.168.1.122	50596	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDWqqfkNFO1nXROca	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
331767.651834	CrghWZ1DO8Qc6Nx6ha	192.168.1.122	50597	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FISF4xNLSEcVmEk7h	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
331895.979903	CcThI41rFjWEaTIXe6	192.168.1.122	50598	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVZ1IW1OnWr6dR4ur9,FRmUxx5MV0auYs9Y8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
332511.645179	C5Xbo24MiQoCWZD4O4	192.168.1.122	50599	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3n7PKNpYyNmd1Fhb,FbrWDI3IR2wdYpVnKc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
332850.425837	CL04mq1HA4tjiOZ4v7	192.168.1.122	50601	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FofhwY2tEPvu0v7z4d	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
333006.482328	CvKU9n3O3X97pO22D1	192.168.1.122	50602	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FA5rhA245WcBODFHEi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
333128.812707	C8cC3q3YpvipvWbRX8	192.168.1.122	50603	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgHg8q29I2lBgHEZxi,FEQKqg1pL2g3SUNhqj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
333430.987108	C2a6lE1XSqFxs6GPp6	192.168.1.122	50604	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLHCHl4fDoW63jfxOd,FFdHon42sUhVvA5Di2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
333743.768135	COGEjn1UpliVOfYWhj	192.168.1.122	50606	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1Hqzl4KPG8S6IU4K	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
333880.860138	CPT6e34QrIZ7wHRik8	192.168.1.122	50607	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FkHh4q14EoZvsIc7O5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
334011.191274	CSDeYU3wdUr6um3Gw9	192.168.1.122	50608	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPZFiL16Hg1sKdexg4,FXiLJA1tgb4S784xmk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
334594.880925	C8eCJyRCvpabk01h7	192.168.1.122	50609	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcqXT53RDAuWPwQ7Od,F8QWt6Penek910va6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
334877.637438	CaeYyj4Y8N2NMARe9	192.168.1.122	50611	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FiGdd6x1bIGlqbfOl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
335016.692536	Czkl7D246ea8AP9krf	192.168.1.122	50612	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNi4nc1RSupTL4Pes3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
335168.024492	CWtSwI3fUeXo06U0V1	192.168.1.122	50613	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHXhaIR2W1EBtuKmi,FtN8Zf1CFoy42q74fl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
335765.703707	CmYIIY3s83jmpVoDll	192.168.1.122	50614	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSPHtb4qEKx5VRbIEe,FjQofs1lL0jQOwf1B8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
336064.145412	CZGZp11FRrnimu6b6	192.168.1.122	50616	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMBup6zwMgN4lxicd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
336199.182800	CIokUb2QvTjKYe1eS5	192.168.1.122	50617	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHjkwR2mlkJoLq2dg2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
336331.517605	CiGl1FOIRJLhN5ywh	192.168.1.122	50618	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FacT354ph4JnhLfMnl,FfT8iUFyHyWQkTnb7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
336990.194357	C2oZ7JsHdTg6VjqL8	192.168.1.122	50619	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F02RQq4AcGh4nd8hf1,FSXmza1K8eOn0af9G3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
337309.977320	CNdqBK2VWoXpeAhWV	192.168.1.122	50621	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FP5z252KC7BO3MnOpl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
337439.055477	CGLLLI1YQj4yBYg5kc	192.168.1.122	50622	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FVNqad40aokULR9Ggk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
337559.382654	COm1U923FHMtEfDTkj	192.168.1.122	50623	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fk6bMd2ScihEzQKWDa,Fkff0WpwAQkOA0lg3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
337839.545820	CD0NKh2tiW0uI5n3c5	192.168.1.122	50624	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fb5ZY42E8tJvbKKG1,FCp2n63Q2ursf2xC63	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
338162.319457	CqmuZE2kOTsGBDGKuf	192.168.1.122	50626	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3IZHi3bbdo4Yodg2e	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
338301.415275	Czq1213xQwzVaLes4g	192.168.1.122	50627	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSp0WV1YXUGrOtrUI4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
338475.740117	C262p33b6lsPojDwBg	192.168.1.122	50628	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkspFMv7ePWad21q8,FqAcT73N4iTwt504Ri	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
338811.913468	CPb8UVzs2BSbc3Jyl	192.168.1.122	50629	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFJ6Ot2mefp1Krawmh,FRpsMY3HgYscFKPwJ	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
339106.695588	CE7Vgi4I2VpwK1NH4g	192.168.1.122	50631	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbUfzN1O0QFVjpL8i1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
339249.768593	CRP2gv2keUnsjezOl	192.168.1.122	50632	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHJKtN19XHu6bg27P3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
339375.103125	Cb6KC13isaNC3KYPN3	192.168.1.122	50633	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJ3Qa73YUn79S8d1l,FXePtW1pYdwdzOmuNl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
339976.778617	CPpvikFMqufFVfTS2	192.168.1.122	50634	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXHZzM3Y7Fs4ywHNLi,FoaTYa16MxwH7QpKO8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
340290.551977	CfwJ8DXBzSyYXXXZb	192.168.1.122	50636	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVipQ3vBLwff6n3Kl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
340459.598133	Cj05su4uTtW1dZfpY1	192.168.1.122	50637	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FiBwfN2omUqrniYGQa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
340593.935593	CZiI1L17YSsN70uI58	192.168.1.122	50638	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGuIt43z9eTbwLibV6,FomeVd1uN9LEvcURPi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
341141.613330	CJH0C43O6Ngqw1E9db	192.168.1.122	50639	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGOSWV2ZbC7iFAJkYh,FYwAo11rO12pNNXzh3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
341395.431341	CwVBc9SYGbs5wJcO5	192.168.1.122	50641	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRRfM11QX6BPM2TDh3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
341550.547010	Cgpp2p1lsvuG91wOB3	192.168.1.122	50642	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FAUeDq2RaLSnkTYqx8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
341670.874041	CeQLVt2ilkwEWSWuek	192.168.1.122	50643	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTpEPBwILMPk50fRk,FoKU3T1wM3IfrXx1w6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
342217.560188	C0KJGr1rgiZ7vpni18	192.168.1.122	50644	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fv22km2Jf4B6z6iYM6,Fh804l4MSq7FUVmz5i	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
342524.022498	Ch4ltF4Jri1IcGCCjc	192.168.1.122	50646	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FevBlhtQiHUldsVy9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
342649.096206	CVFitY1ONTeH2jVJs4	192.168.1.122	50647	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqoHH22E5jZb8cgKKk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
342822.429621	CfOBMER6xcQm3jcll	192.168.1.122	50648	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgsEWO1CRCUnYKPogh,FIB8U53OTsxZBvQE92	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
343395.103664	CpEu9s5xD1KbgG4d8	192.168.1.122	50649	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFIcmxPnbeGvuZg94,FKKSX51NlhDub6GMge	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
343668.595670	C9xEXM2m3FFXCjH90l	192.168.1.122	50651	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FU3KYj2H5uAGpEi1jb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
343832.668202	CUzxAu1I0HvxWNuzNg	192.168.1.122	50652	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwPqp82KFtaJlTyxCe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
344007.994591	Cxn79s26VWHLVQq0we	192.168.1.122	50653	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FirNTi2RgjO779WIXf,Feto5H2un0nCPCQyI3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
344614.666554	CcZWxF4Nwo4qSJYLCi	192.168.1.122	50654	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfqTWC3G5Dw4wXmz18,FaN06h4jAUTAuLef65	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
344904.436599	Csbylt4ZexTHYMHdp1	192.168.1.122	50656	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FB0SD22IiYjTEYyLJd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
345056.507673	C0lfir2G5mBsMPtC8l	192.168.1.122	50657	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fh3TD04TjFrPyJ9fa4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
345212.836856	CJxCe03ojmCpGK532	192.168.1.122	50658	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwykfDl7DTGuzLlFf,FU9x5w3P4IPSLBETa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
345832.518072	CM4DpY2ImHeCxdgrHg	192.168.1.122	50659	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fj2HC536gU7jkoQdlb,FZWtr4AZfbPAk7rEa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
346105.009590	CvBR0H3jx29hEVsAKe	192.168.1.122	50661	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F9AP5F1CsF087N59t4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
346250.143978	CbMklx1aH5ytCY85bb	192.168.1.122	50662	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FnUBHx3U34CXehJSad	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
346387.475438	CN408n2chKijZBpiTl	192.168.1.122	50663	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FObZGmyeRoICx4jYb,Fb5MPCyZ6nkwMrsmc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
347042.156871	Cfady34vJxzqLdsU29	192.168.1.122	50664	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfxC9Lv1wjP2EoIB8,FUH79w1X0Jveb3Kih6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
347335.936475	C63bwP1qqbDoYeUHOg	192.168.1.122	50666	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrqKv64m9WfkcHw41	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
347470.027894	CHUixy3g7EmJ8seGWf	192.168.1.122	50667	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FW7T751XvtC9Z3YNY9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
347599.357842	CIIEHc3Zt00ZdhGRVl	192.168.1.122	50668	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqsuaC1As2MgPXrXX2,FMOTvZ2Ri89n6tmJk5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
347846.833641	CIRGb3TYGQipBWt9d	192.168.1.122	50669	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlbrrD4oKQ8i2daaNa,FKd27u1Go9Wo6eufPi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
348178.616382	CoUnJ01XbW5ZDYMfDb	192.168.1.122	50671	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fnx3kc3li5UP9G6Zy4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
348300.682046	CUPCfE3BXg1q7EXqK5	192.168.1.122	50672	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxQaa42MxGEmOk3ti5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
348453.015047	CwOimpRSKklO5fao1	192.168.1.122	50673	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLqVJE4XiLZgL2wH0a,Fjt3Mz2YwiAUTkepZ7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
349078.694926	CU69Od26jl88EtuXl3	192.168.1.122	50674	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGssRpEoP7yFl36ed,FcrCgu359AzhX6InLf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
349432.449700	CMUS0q3xVSFPrbeEt5	192.168.1.122	50676	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FsU8ZO1I0ZZC8kKBi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
349588.513947	ClzPyg4CV7IGEVRVkc	192.168.1.122	50677	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FvucV41DnThXvBT3og	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
349722.841047	CEz5csO2bqeoIt6pe	192.168.1.122	50678	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLaSfN3tNRX9vmajf8,FmEu088J8WmLejg59	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
350271.509820	CyewmM2ZvyXoQMYYbi	192.168.1.122	50679	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSJkc71oVrL53ssAI,F51U1G3TNI8dIM1nd9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
350600.288381	CSFs6G2Zl5CKxDoghe	192.168.1.122	50681	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FxrmgK23FcOkMCJZS7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
350753.388685	C4Qa4fJe4lfisCuSb	192.168.1.122	50682	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2LPbemAALZFSaS76	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
350877.721359	C9n9Z21OG3oehEYkM9	192.168.1.122	50683	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUiCVk2b9AjsrVQqu3,FKtDzf4E8oT8XIlM76	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
351429.394766	CdY6in17Z1eJWQToR9	192.168.1.122	50684	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOAIvAxZuaH9Uj2Nf,Fyyruo3nfriu5kx1F7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
351745.197033	C3NQuy9IB7sRtxB2j	192.168.1.122	50686	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FO6Ts41dHt3KxHfwib	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
351882.271538	C8eO5O25IBmnJ7tkkb	192.168.1.122	50687	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FITfHq3Daz9RmS8rG9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
352018.601781	CfSkcn3YsQxGOzlcnj	192.168.1.122	50688	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMF5bs1w281iuMernf,FJZCi52SygctWtOIeh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
352607.288825	CbqrNo1UVwkYGdbmbf	192.168.1.122	50689	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6qdtH16mHdWt3tr4d,FYyIMD3bOOYDwEr7C5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
352926.083143	C5ONr42FqzEb5ftJo6	192.168.1.122	50691	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTdQnA4Oe7zxIQGFK8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
353069.179309	C0lgonRBY301b7lWi	192.168.1.122	50692	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9b5O83ltsGXfFQTS7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
353192.510028	CFvQUH2RNDRQil6iFi	192.168.1.122	50693	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fir9Jk2wFcAwDRO8d1,FiOBcf3CVdBOIsCgHg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
353435.989927	CciXIk2JjtCCPgf31g	192.168.1.122	50694	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGoV0L1jihfNm61Db3,Fqe43h2ll799oO0FXc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
353786.783721	C0V4NF4sBsKceF0vz4	192.168.1.122	50696	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FxF6D11fVBPb5UhsD	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
353942.864153	CNYpSG16J9nO5Pfzif	192.168.1.122	50697	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FL33kQFeHBCODgR7g	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
354100.194522	CWUvJy2ekPjDaW3nNb	192.168.1.122	50698	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrXPem2UeqA5YtC77,F0Hp393YvNiQivvc26	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
354386.366727	CjU0R91L2TU0FzC6i4	192.168.1.122	50699	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAOtl84Mgh0yCP3Ua1,FN53rv2lvTkHHYAN2e	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
354663.144321	CeJhGj2OQa4uDGWIpg	192.168.1.122	50701	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3ZMx84ZK1Ix2n4EHh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
354794.218468	Cl0DH13Vkne8NcGzU2	192.168.1.122	50702	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FbYxnh2wV5xW186cWc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
354970.566734	CtMrbp2NAROqdYy2V7	192.168.1.122	50703	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdmJxp22JXHIdvDjmd,FqhBPxPZVvRWFQkfa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
355583.247225	CzfkQF30M6amsSk81g	192.168.1.122	50704	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcTgza3m2uNMyoehOj,FGAmmV2v8ibpE68nSg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
355864.040368	Cb8Zgd3uUKZ2ucvkq8	192.168.1.122	50706	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3LTnF1aK0dNSZR9ke	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
356012.139320	CFIMQt3EvQLywqZJSe	192.168.1.122	50707	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtSRxW32z5ryJMmNa8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
356146.457112	CJeOTqCEBxkjY3Q4a	192.168.1.122	50708	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fu3g992a4ozOAuRpXj,FH7px52U9McuBIMgjk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
356796.120754	CFyXzL1JqjfO57W5eb	192.168.1.122	50709	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaACsZ12rpkT2qs48g,FMfasGTYbr0DrbGFb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
357087.911161	CyXHfFzwhmow1alwe	192.168.1.122	50711	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpvOzK2s01gQBNu372	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
357234.006298	CnammjpkZ4Anwab9d	192.168.1.122	50712	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fog4VV1SloDrDSDLt3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
357392.338022	CQYtZM3Vev00wDNKo7	192.168.1.122	50713	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbE64l1BjnQWm0WAlk,Fmy4he9UzZDExvKLf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
357642.517736	CLsRm5AkBbHjs8ch	192.168.1.122	50714	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkiTFKIvH9qylx0Qj,Fai30p323cDsY3fcY8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
357930.282922	CsUE2A1iWvRi0Lg7a1	192.168.1.122	50716	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNatfv1P8L1685KSEg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
358055.366956	CW1XOK3XHiKElrGXC	192.168.1.122	50717	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FFgzi44q2u22hpZKVh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
358214.690647	C6xMlq2wdOHyoseYWg	192.168.1.122	50718	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHgItarvrYhigdep3,FTg8O72Gz3Rhiy1RW1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
358838.397418	ChA0be3LfRqVX4t5b8	192.168.1.122	50719	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4IuL13Ia4ewHo73Ql,FEXtmC3CufVXT2aJdl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
359470.404482	CBfejW2CLyCz1DjKp3	192.168.1.122	50721	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJgbs41hFDMbkaot9j	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
359640.527602	CucIgI28YZLbVWtK	192.168.1.122	50722	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSZqIlz0ZgGDmm103	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
359783.855305	CjlNqV2em1OcB6Nhre	192.168.1.122	50723	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FT4Dqd17iTkJeUyvZ7,FQm1Xu3qNlFYtdighk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
360359.524572	CXckBf4hDM36YUlvo3	192.168.1.122	50724	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrCCdG40vPNMmRySF3,Fo416022ji7ELLOKka	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
360681.000596	CZNuSV1HpLLXxwzdLd	192.168.1.122	50726	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0lHjM1Hg0dVKiixg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
360831.068033	C5Fatk3vwm5RqLsW0d	192.168.1.122	50727	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F146Hr4uYsFyhbpoEg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
360979.395481	CUSQcC4sUhf9fu8hs7	192.168.1.122	50728	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fm4t9l45nFOcZ5I1v3,FQVybESybMTYX8ty6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
361549.074559	CB3ngxC3DkLXFa1i2	192.168.1.122	50729	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcRskbjUjr7yawRR2,F0n5qd3LgfGqzegXLl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
361811.553735	CE9YIX14P9aMb3bJng	192.168.1.122	50731	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgIgFy1gY90T8aY48a	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
361965.589056	CYeFmmnKUC1YGMvce	192.168.1.122	50732	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtZgur3RVZuecN7c7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
362119.915291	CHotoOLzQ2Zpdxorg	192.168.1.122	50733	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdzDCMxD7OnFE3KA3,F1HzJ13HtEzEFz0oA9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
362716.593230	Cws7BK3Zee82ryE4Wf	192.168.1.122	50734	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZZTykmIPqc8gXdUb,FO8CSX1V3LeDRWjLH9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
363044.083703	CYHiqW2kZf3ghT4Px6	192.168.1.122	50736	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJYPOo2jM3bnpYpFmc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
363208.185780	C8wo6YUULFYBYn1le	192.168.1.122	50737	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBbHV747uf109nKWS2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
363348.511642	Cm2GLc4GtFNQKSRxA3	192.168.1.122	50738	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAYRz7rBJUX11ZzBb,FIJWBbf33RWMJ9rKk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
363971.177055	CTv2yA4sP2ip4yIYf6	192.168.1.122	50739	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPwMIh2dLnKoNA8PO4,FdHBFfhhPl4sUIoZ9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
364298.675799	CR71cG36hHxB3ZeDHi	192.168.1.122	50741	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhWbJy3O1WAMvxEL8e	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
364469.769346	CmSPpU1BVWIT7kPdp1	192.168.1.122	50742	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBZVXM2e5ctf7vJDDf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
364647.108792	CYvb3J18YqH8FnAJh1	192.168.1.122	50743	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBb8tbcc8BIao32Fk,Fi8Vzv4IoqQVry52H9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
364998.283616	CMA6dG10eN6s13cRJh	192.168.1.122	50744	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBluED4Xwz5btBk7r5,FZW2Uu46XbngxzgEYd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
365278.767338	C8U1Yz3p2qErU6Zebg	192.168.1.122	50746	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5Hokw03EFK3zUfD6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
365403.832900	C41Pse9eG5H5jibw	192.168.1.122	50747	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8Fp0b3pw7lhwq7qwj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
365575.153061	CTMGAh4ckYUMBMhrE3	192.168.1.122	50748	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNfVee3SJoekFsRWic,FRMZ2M3oiauVrr2dp4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
365830.640447	C9xdGRnKZ1JeFTPK7	192.168.1.122	50749	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7MVCC3AbPNct9ZCW1,Fp5gAN1eVbkQ1Br98f	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
366164.121607	C3LkBv3x9E3pyvJBec	192.168.1.122	50751	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FSCfdE3WkRvHjFR5Hg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
366292.189828	C3IknQ2ImjBqGoIWo8	192.168.1.122	50752	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9qMGpQZ3RWkcd2jj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
366428.519941	C5PQ8w4q7ObgpPu3Ce	192.168.1.122	50753	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdC7lH3l5cWiRpVzx3,FMrqpz1nwsM1a9xEWi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
366983.187669	CEwA2yUyGsybYY6hf	192.168.1.122	50754	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEXXUo1H4Dpct8s23j,FQYVqAbXHaSTyT2R9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
367295.659784	CBXDOS2lT56gm2ob	192.168.1.122	50756	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fn3Tze4gmgQwpnecW6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
367454.741506	CKaQZwH4H2ufLiSLd	192.168.1.122	50757	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlHd7y1jIMYk0sNzbh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
367621.074503	CQsxZ13ilAOtDCAJa7	192.168.1.122	50758	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJfyne3WejgSWNxpjh,FqPzKn3hZ9T3uogfii	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
368243.760283	CuJIaE446jB7rja5bl	192.168.1.122	50759	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fhmr1tsH1A0wD5c62,Fay138JDulAszO7i6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
368544.247777	CBy7eU205KHMaBlk4j	192.168.1.122	50761	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fkq1Dz1AYmnk2bcNHe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
368679.302012	CSmfMUL4hAE8tcQHa	192.168.1.122	50762	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOUncH3T19rSRstPTa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
368825.640568	C4iok131XqQ9cs9jie	192.168.1.122	50763	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgmfhA1y7XvOSa43y2,FxcY2h43eqNDkFZPgg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
369397.318699	Cu6stXe6olWA0olfi	192.168.1.122	50764	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiKOrR1sNZH4YRzVoe,F84JG919StNSkS4olf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
369663.795817	C19EZD2giSREBknfpk	192.168.1.122	50766	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhPK6k3dxIo84dgW2d	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
369815.866163	Cy1Emw39dzwVMs9wC3	192.168.1.122	50767	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F23zcn26dKpKUM37bb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
369975.199831	CIGlhF2blJEwOo9fvi	192.168.1.122	50768	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fbg71E1tRibthTOtnl,FjFcqP1AzlM5Wygq7j	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
370532.871505	ClazDWDvUBgd2OmKh	192.168.1.122	50769	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Faz2Ct4JwijOefhxNe,FgpoEd2iH4AMjzLVFg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
370808.366349	ChNvJR3xbDAh3Ryycl	192.168.1.122	50771	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fimyto4y6cojiBZI67	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
370941.444148	CGt2cz3ol5NjXKiRwl	192.168.1.122	50772	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FkQJ784vs8jYV76Ej6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
371112.785035	Cwfhoi3zcegoW0VfX3	192.168.1.122	50773	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGpdBj1fm01EmLRtDg,FXAFLw1GZc4vVSF093	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
371692.458552	CM9fPj3tfaD1DxMHZ7	192.168.1.122	50774	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAKsgG16LOUzK9b9si,FH7FCH3d8ySqHz6DT3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
371966.937740	COcKI64LjpEkVjqfVa	192.168.1.122	50776	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FyokyZ392pHXFXDHRg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
372139.196402	CR9oop2L39eHgFdS05	192.168.1.122	50777	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOzkkL2L62uQSoU1P	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
372279.051712	CZwUwCGURXrO3DnF6	192.168.1.122	50778	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fddw6oRoSNlJG4si1,F6U7ZF2pghpjQKwlF9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
372899.727342	Cs1nyA1YSKFtHEiBli	192.168.1.122	50779	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fmh5S836CG2ViJXJmk,F071OO3H7bmx7WFad	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
373173.227009	CWQhuzxJFt5jwlg6i	192.168.1.122	50781	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FiAhFU1SkAp63PEsEe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
373324.310983	CZlwTJ1y3R1RHQvEXb	192.168.1.122	50782	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FeRMV61R8XuZn5Msxe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
373494.639445	Cyf0ve2EzNlSBGnYL8	192.168.1.122	50783	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIscdyiHrJWUVX4s7,FeU9ptTzOVR02m9Le	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
374095.313120	Cj93fg2abSvnH8SpTl	192.168.1.122	50784	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsU7IS3jmkTbNhnV2,F9QzBQ1GploTDXJuR5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
374431.810440	CoWD4s2ZB91JuV7OR3	192.168.1.122	50786	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FEEbK92X851abRHeX4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
374667.823149	CBB2Qn1oM2dynYN5se	192.168.1.122	50787	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FTVXh42dYLirq6K1V8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
374884.027656	CMG2TZ2MzdAMh25hJ7	192.168.1.122	50788	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fa5qmf1nDzeYubCsll,FP4HZyKHFPToH5pb5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
375439.706209	CbHtjj33dFbphAQREb	192.168.1.122	50789	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgwCdo2qBBN32V7RRa,FJU9i1Kog4l2664Jl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
375737.204967	CW1NeG4n07YYVqCcDj	192.168.1.122	50791	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FOtlTJOhyHGcxGJC4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
375883.279998	CCUyYE2dvCyzZlsIMj	192.168.1.122	50792	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSYNcY2I2aFdM94Uk7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
376032.598483	CCzW2d3fwyRnMrKaP7	192.168.1.122	50793	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fw6v0B4idk3AUAjz1g,FynImO2j6HdlDTpPkf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
376580.276685	C0PRbMLPL82ZoePaf	192.168.1.122	50794	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJQzw22p6ePSaxLFNi,FxGGhAV9uaLEb8PEg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
376845.748849	CyCWXD3S1tP3SL2H3d	192.168.1.122	50796	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FE45oG4OwGm260eM2g	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
376993.786942	CCxSoab9Ugg1lrVwd	192.168.1.122	50797	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwEnMU3wxssfc22BBa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
377130.106629	CFWfgbxTptZBJRMch	192.168.1.122	50798	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQANaz1TTz3F6Fymcj,FWrGru2ZbVTsUWw6Uc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
377722.778766	CX7b8a1bapf2PsHZAc	192.168.1.122	50799	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8D5gp12mvtGIfNKmj,FKpHAL1bUmiJFpSUy8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
377984.246541	CyQ8kK2H92cqGOqv9d	192.168.1.122	50801	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlEZjq3L2eHUjBuF16	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
378138.360516	CxGQGi4PzHjnMfeKHe	192.168.1.122	50802	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FuVizvNrZzTMjKTha	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
378260.842204	Cd89dZ3JrW13Ql9Apc	192.168.1.122	50803	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZWcR5lG8aoCGVa1d,FuU8wr30THwg82zNNd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
378849.518704	CXHu7G4OmlP5TMie23	192.168.1.122	50804	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2CIFw2K9XYQ21bcB6,FGd36A4CbkZOiRr2Zf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
379165.033380	CDyp143TD6a9VzmCa5	192.168.1.122	50806	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FS0WTh2JPDRR7yU501	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
379330.125207	CxAz2P8H2YCLgD9Q7	192.168.1.122	50807	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7Czjh3VEnfyOHJvGk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
379453.447368	CRquIw4wuTLyCV0vrf	192.168.1.122	50808	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3sAKi3AjcWhamHU42,FXRQj12sVJjQjPT8ag	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
380030.116194	C2jJsr1gZRx5XmRCNb	192.168.1.122	50809	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fnn0iFXsaKyu2lbek,FLm5KWcElqHBBcE86	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
380354.583626	CC2E9G4NRoRv5SIIqd	192.168.1.122	50811	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYnd241U2oSvipwY6j	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
380497.624646	CdmhFH2dy0Ju782Ri8	192.168.1.122	50812	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOPqEWIuGbg2i4cf4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
380623.939868	CRe6kM2uMzapeyjSYc	192.168.1.122	50813	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFTTmr1Q7EK4Kq2qC6,FB3AArFtbdDQsAYfh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
381256.630350	CGBA3V2WYpbK67REUg	192.168.1.122	50814	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLvKq945uUT6CvnMA5,FZZsfd1QLpPq8C2Cp4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
381560.112449	CVthLP3SUcQN04FxC6	192.168.1.122	50816	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIXRM13Sua1gQP9px6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
381698.326467	CeYxKt2pvvCp5VEDVe	192.168.1.122	50817	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQj2sk4tvPhm63maI9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
381841.060038	CDe6WuGAGxjBdBCW1	192.168.1.122	50818	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZ2tJ13hSaZSpcoeta,FgAkMf2qeHoXh214r5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
382485.726832	CHdOB811bFic384WQ5	192.168.1.122	50819	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FW0yZa3yQ7VDajPuB3,FsE45x3dXolKBZHE24	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
382764.205475	C9gAuw1w2bNOxxfQ78	192.168.1.122	50821	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUXcrR3PVhFgwyN9rk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
382908.279853	CFqx2R2VIUkb7bFY8i	192.168.1.122	50822	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Ff7rgD285F43b8Ywh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
383045.592313	CW5JpP1zB3Tyxy0bg8	192.168.1.122	50823	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIEioR2LFU7TtR198,FxuO9R1GRny6m3mtth	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
383676.258655	C8jaJK3r6MKwsGsNdb	192.168.1.122	50824	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoIE2Py2IzATOP2J4,FFaD9QOdMxUNfHYW1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
383972.744682	C6touN3rRuhrxrRnw	192.168.1.122	50826	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCvZv731QiDhFWZPtb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
384134.813840	CtyzHC17y7pxuRB0u1	192.168.1.122	50827	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXweVY3uFjEU77bK5a	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
384292.133982	C3fA4TRaJDa5Xdhj5	192.168.1.122	50828	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fbcmd72mMfPL3tTgBa,FAp4Jc4BcTjTbJ2Sjf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
384897.804888	Cxt7Sc1nn6xWio2j2i	192.168.1.122	50829	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeV5xG1CCGd2yv9Bna,F66KtX36tCusn3VZz5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
385217.290695	Cih6U94mnHDy1PNX46	192.168.1.122	50831	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAoBsP2xfwFzHPbBhc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
385382.367091	CwJnp01TyofyAWqkNc	192.168.1.122	50832	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYqRp11WWvy2X5GlMb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
385507.691832	CtPNuh4PNADV17rgZ8	192.168.1.122	50833	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZjQ6G1RbTI87RiLe,F8prehl4b5xW4Cb53	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
386066.365738	CEkqiG4GmH1QglqDxj	192.168.1.122	50834	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCbqTd1mNpStnc4DU4,FHCikU1bEVUYAfvYD4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
386635.345530	CYY5Cx4GMFeWBZ48Al	192.168.1.122	50836	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLamyfw12CIEweMug	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
386801.398909	CrYlGl1Zz0SV9tP0R9	192.168.1.122	50837	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1EYkz3WY0Wi7xSGn3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
386926.720473	C5sFbg3h1fZU3NLCD4	192.168.1.122	50838	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fd2wKp3LI420iraYn3,FZminX2CqGT1NH0FZk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
387484.393796	Cqcxxb4NvxyN3zvh3	192.168.1.122	50839	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6QknO3h8d02Hx3Yf1,F49AB923de6KoBGNJ6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
387779.165810	C1fWI5OeyxdpnXRc	192.168.1.122	50841	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTBSfz2EJfLKPoMPvh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
387930.260541	CYMvBmGNQbFh7t9R2	192.168.1.122	50842	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4w4jCPsjUHGdYma3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
388050.577721	CuvGfI2qdAJOh6Pwwc	192.168.1.122	50843	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMfHxJgqLCE4IN47i,F5Et8c1Udlw8zwQI04	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
388594.269808	CFQaxu4Oi2m4jjVlBb	192.168.1.122	50844	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNdEfh3OrDDV1RY1Q5,FYUJtp4trfqEgwgcMd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
388879.055077	CkEigB36ewAll5hl4h	192.168.1.122	50846	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJ93C819DoMtm62H9b	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
389030.121776	CJ8QvA4zfCbr5IFbhk	192.168.1.122	50847	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FjyQi944i9Ye27Db0h	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
389172.440800	CbAlAN3JdjrGIHjjIl	192.168.1.122	50848	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqlhaQ3yI1Q84dmRoa,FSSU9D41Tsihk3kmFc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
389759.105020	CWoDSy35fuZwO4yE09	192.168.1.122	50849	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBQnhW1OCx8zNxigBa,FKepp825dIG6HOGspc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
390097.909588	CHlc7E3vuoIoO9VN1g	192.168.1.122	50851	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLNRpp2MpGzFrNcoYb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
390277.202256	C69jnQ2LiHfgpY67K7	192.168.1.122	50852	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJsWZ42JIwhGBe8xl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
390405.002836	CAG2nnJOfU9Zipg2h	192.168.1.122	50853	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7yfsT1J13e3M05HDj,F3JOWD181YwJnHsHZ	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
391013.668326	C1uXm04QZpPh2y1Fq3	192.168.1.122	50854	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkPi7L1p3Rjw5v6T7f,FdWHCt36PPOKbupTy1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
391294.444221	CCLVtok5s4mw07Mih	192.168.1.122	50856	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNriVg4yKWlSprA6C3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
391463.490506	Cmsznw4cEPHeavc637	192.168.1.122	50857	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXrd2t4IkcZpareHp8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
391595.814982	CW0wxk4vAPviimEjoi	192.168.1.122	50858	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBYQtb2wO3ri06UBia,FltCvQIjrFBdeA925	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
391907.984298	CTK1yk1sjKD12pzfCa	192.168.1.122	50859	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6yliNrx6FpMPqqdb,Ff5q0u2ik9rlVSoUfh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
392182.449717	CqFMpf2xGCRO42Ebnf	192.168.1.122	50861	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwZ3Z93X872Rk64Cm6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
392303.508259	CiZgzw3KHnbzd6DpJ6	192.168.1.122	50862	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FpLCRE1sTHDQdqfl61	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
392480.827475	CuW8ps1yJKcysVd8Ec	192.168.1.122	50863	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtgC8F4dwtdv6ndxgj,Fda99D2tKEdbOngGz5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
393021.494916	CSOajg24hWtJNVp9Y8	192.168.1.122	50864	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FF0KlbdktlFDl92K3,FLu9lB4LiOrFwH6zMd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
393309.303752	CaO2264ax3jMJcs2Xh	192.168.1.122	50866	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcaVkt1r0D9LpTBij	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
393436.377205	CLl2IH1wIY5Jj7aJbd	192.168.1.122	50867	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqzlbURYDCUUVnMvh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
393608.709088	Cr9aCX2PAZz6bpQeO	192.168.1.122	50868	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fd2huT1lx2EWsXgmHc,FKPgUg44Op1rQPKUs8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
393853.881640	Cyxywu4bTJBwU751Fk	192.168.1.122	50869	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuTkIm1ndVjLpx9cg2,Fg9nRK1FI8LKV1vuJ1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
394166.648669	CpU5zw49wnodRcUwTi	192.168.1.122	50871	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDkS7PcB181z3Q829	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
394307.709692	Chd8162IeJ3sKERXJb	192.168.1.122	50872	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fd1b9U3HTDCZXthPTb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
394439.033065	CfLVZi4OzoIqVzrjw6	192.168.1.122	50873	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQfhd24QJC1cIj4IAd,FITkTB4YQlr1wg97L8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
395090.710045	CMrIoR2rJ8mBPvcmyb	192.168.1.122	50874	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9tkev2ODDD3Z5MYQ5,FwzqMIdKzx6yY3Ecd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
395418.493992	C36ln03mg3iDo7Ben	192.168.1.122	50876	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F972CE1xIOMcPki6dc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
395547.582609	CkA1qa1rj6Cki7PsM5	192.168.1.122	50877	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fo97xdkuxkETxjTrf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
395696.901526	CXMgxs3ObNcSBqFB4b	192.168.1.122	50878	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBZTnU11MJ6e2LepP3,FrXj5A3GRyRR8n1Fze	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
396255.584824	C0FiEN3GPriQiIr0u5	192.168.1.122	50879	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTNBfD2BS7W04HmCuj,F4ySzu1s2CZNx2kgDl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
396519.378098	Cs12IGjrz5ZRsBmYb	192.168.1.122	50881	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FsUg4RyRgi1Zzkrti	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
396659.628043	Clel8G13Eyfh1dOWkd	192.168.1.122	50882	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FoKIhXZU3Jy57fnK6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
396812.515462	CPp3QoBX1aW7aBKV8	192.168.1.122	50883	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZBIZs389uzwJ8Pqne,FBRKIz273I5Bs9r9Se	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
397077.676592	Cv24Qu43Uf7rhsVQE4	192.168.1.122	50884	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZKw2E3G7knIisTY54,FQ3DVA27F4QT7HQJF9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
397395.472341	CBSRXl3SVVRbkytjZh	192.168.1.122	50886	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBuHk71hmqpFzLSgkd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
397538.759101	COXgmP3Hd7by1yrqib	192.168.1.122	50887	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fbxn2vB6F30evvis	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
397672.652184	C7Hd0pxMFFJ2g7QYb	192.168.1.122	50888	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLCqVw1SwP3BhjDUvl,F0rd0sljyyBZ90sc2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
398262.330219	CbA3ynGpvR3Pd1vz7	192.168.1.122	50889	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQIaer2RiIrR1uGBDb,FdaUUg1wUyZcqurvrd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
398562.079805	CfWsbX1Ndl4PuoKPk9	192.168.1.122	50891	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FoCoP63PifEeG6az8e	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
398733.123024	CXfLPM1m65USgrgRg4	192.168.1.122	50892	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0rgh3hkAUwC1Z4ak	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
398881.440379	CiPS1C2qlBn0AnTVck	192.168.1.122	50893	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvOshD28Ag61kWDdsa,FWAnEi2qMq7grfOONk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
399195.601832	Ck0ByP1I9e4xlAgbbk	192.168.1.122	50894	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqCxlx4alnDQiNaes6,FHP6qj3rxoDXXquGy7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
399524.354170	CuTZvG4VxzNmBK1nB3	192.168.1.122	50896	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3RAPx4Z9MShwCrjal	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
399692.417732	CBo9kb4inI4cLeG3f4	192.168.1.122	50897	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGDYap3RNbTfq0QW66	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
399836.773469	CUSRE4DsQdC1prTY3	192.168.1.122	50898	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ff8xkHM2OPBddm5gb,Fzn7eYoQ8CYHR9idb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
400143.945295	CHKGsc3VvtXLpPLr3f	192.168.1.122	50899	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnTiYq3KVvmtI2KqY1,Fa4Uhe3ZjEQYbDxFbb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
400412.747745	CGSuwe2ZUnJL3Clxac	192.168.1.122	50901	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzJz0V3FAlBwqHV8e4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
400585.010144	CeGw773DQNubfN4OG7	192.168.1.122	50902	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDLemf1FV8s0jdubv5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
400761.824391	CliYPi3bZ4ggQUzsgb	192.168.1.122	50903	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPXouZ1KjI8NN0A0Rg,F6se5a2ByaJYMeVnTh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
401382.496469	C0vl2D1Tls1Tt4WxN8	192.168.1.122	50904	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAhvmD2CXtSK1iC1s4,FGAMr9283ML6SfXwyd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
401699.258932	COZIIYJ8rsYzz54Nj	192.168.1.122	50906	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPl3uO2B3jFkGymY31	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
401822.354209	CzoRnzSyjubdNr3qb	192.168.1.122	50907	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrggtkRHr0USAMbu	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
401994.676140	CiaC981vEs7z7M3Drg	192.168.1.122	50908	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTPfNE44ZmF1pKbXFg,FJkWcy3RNNeElKSBG5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
402616.350321	CNrNaU1VB2SnYwLiBj	192.168.1.122	50909	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FN8cin29aCaTMcm5Wk,FZ0O993kXzUbVdWuta	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
402882.137087	C4f3H91ycrN8jnC9r2	192.168.1.122	50911	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fx0A881rPFep3BiQi3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
403055.216753	CSnQCB4xlUQa4yPcr6	192.168.1.122	50912	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fpezsl16HLQIVAn6Kk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
403222.531715	CpcvOA4WSTFvv2VU7g	192.168.1.122	50913	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeTobu26SmzQI5VbUj,FxLgbJ2tZsmZ2nFyM3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
403809.215270	COu5zB32LyRONmfZPl	192.168.1.122	50914	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMe82O3LQOOvRkpJ5,F0Yxiu2xKmBjPkjX02	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
404139.977533	CXV0lC4mVctOvCKW52	192.168.1.122	50916	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYW8N12UiVpr6uxp32	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
404295.029720	C0RJDjaYdusDsXJrb	192.168.1.122	50917	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FeNuIn3qZSp7nZt2ij	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
404425.351101	CbaSy23TUTOnH5r9u2	192.168.1.122	50918	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F90NBbFBzUAJq6Wag,FUjOm4CvHjg2xitRg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
404985.035750	CwuZJ73ggfugpHouTb	192.168.1.122	50919	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEoBLYJZ5ZISzDqKe,F3gD0q3UW9d6Z6nzE8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
405321.774200	CH7hh249QyF6x8IGrj	192.168.1.122	50921	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FaW0eqov0YZfI5h89	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
405474.835866	C6UJX34TtweYmbxvt9	192.168.1.122	50922	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fh1Qw5cVasQ6wAoO1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
405601.151708	C4vCzt4CIp5uP4j9W2	192.168.1.122	50923	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpOoDI3AnQsFL1rVKj,F4tqJqHeoO5o21pL4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
405857.319736	CmM2l33UDr8S5fGUck	192.168.1.122	50924	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvB7fuhFVCURPnRM,FNp4J9379ROiuO66V5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
406147.107462	CciJcf1twGb4o5b2G5	192.168.1.122	50926	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqYiGp4ltRNyd7JWS4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
406285.180702	CbtDiE1UIts22la8J1	192.168.1.122	50927	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDpyrw3PPTUG5JzL5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
406406.499480	CaDLHg40s3HjY2aCP7	192.168.1.122	50928	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQ8K4H2ORhnoVo2kFk,FgYofEUF7qHncPIJ4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
407015.174751	CzMOlW1YtUVekLyojd	192.168.1.122	50929	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fdo9C5TQUsIKLBbJj,FLZpGmKsByKH5PDOa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
407361.942499	CtjyhCNufSeTCWQck	192.168.1.122	50931	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2kvqA4PUHyw4I2GE	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
407533.996260	C2xU082dYpoq8IyNk4	192.168.1.122	50932	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSeTBy21GelxjLu525	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
407701.331185	CM5kvA2GmXXiYTPwvd	192.168.1.122	50933	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXE6Xu1IL3pklP26S8,F9yqH14iDEtoruSfTk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
408038.806489	C2LxEB27HLRCKP9BVc	192.168.1.122	50934	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPOcHT3P0OShHwrWEb,FrCyDU2ExXwHWRpVkh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
408304.588734	Cl0wTs3CH30RYuupOb	192.168.1.122	50936	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpPjeD28au6PankKQe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
408461.680026	CwaHBe3r5aXaX6cWWk	192.168.1.122	50937	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FVdPNv4e5a5epr8EFa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
408599.016472	CtAn8t11sMf653XEV4	192.168.1.122	50938	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FptmzF23dWn7vUSO6e,FyidR527FCTl9lbDh3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
409148.692671	CzeR7j4aH6cIvOpet3	192.168.1.122	50939	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2KLT048tSkSREsjoi,F9kekM1YF5EL9n0Y8e	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
409477.198192	CTHsYG9asLna553hj	192.168.1.122	50941	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDLKwd20POvF5Pxf15	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
409642.297681	ClIdMP2ZlwkFpgbFBk	192.168.1.122	50942	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FbAmjn3aZOGmEBxrAl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
409808.630959	CRMQv52C26nwxgLcI3	192.168.1.122	50943	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1f9Up155yWu3MlyY6,FYdZSGS5fvDYxeNIc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
410441.310785	C4RBaN38rJeZSpwoMb	192.168.1.122	50944	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5YTzMZpWZ2NaUU6h,FFFv2e4CnMI1QdP33a	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
410697.090263	C7uR0A26lUKXGblhpf	192.168.1.122	50946	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYY3rz1Ftv21uMN71d	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
410846.149166	C7SFdD4EyHvRJm7nMj	192.168.1.122	50947	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqW1fD4MXrQs6mmLyl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
411015.476452	CTZi3iGNkbKvXdpbg	192.168.1.122	50948	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3bYbF1KT1ycYQqAG3,FxiDOj1ae80tGH67gc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
411567.149740	CeGYdz3Show4EbsfF2	192.168.1.122	50949	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaJ5XL2oiZYk3VzTob,FpmJeU1LjSKotELn87	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
411866.923299	CBp1r11LOgQx7mqVna	192.168.1.122	50951	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4ZdhmkSCJ7FsC3M4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
412024.973425	CECY5QEfu61zC45tf	192.168.1.122	50952	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FL2yMB4JIHKaPANBj9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
412151.299178	CiyRCpyvOBTH9XEsd	192.168.1.122	50953	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FubJKV3ZFxcU2n5ya9,Fozuyt2RGE6lLwJdb1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
412701.974102	CcIxWa1l3ZfoPcLs7c	192.168.1.122	50954	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fu8KpEg4Q4Fdkvkdg,FR0W9m2ZXTuHLQJtQ6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
413013.730073	CUfoSR17Mj2H3a277l	192.168.1.122	50956	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FM8ekx4PDBMHfXSAHj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
413189.768054	CMUxur4dtr73daise6	192.168.1.122	50957	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FU4zVt1I4TAncZ5ocg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
413347.098510	C7CDek39ZEPBWa4uH4	192.168.1.122	50958	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYqrHr2XtG1k2u7wVd,FIEANd2kY9dpPInxN6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
413963.775180	C2pftr4AVpzK9DJi79	192.168.1.122	50959	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1DiTi1bOGwpd6JiBj,FoDtnsvgYzpNibrEf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
414261.563159	CcT8i64BEUTOBGm6ag	192.168.1.122	50961	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDQUom11528gkheGdj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
414433.656961	CAVarxxUlAw7EH6H5	192.168.1.122	50962	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FsRRa62w2hw5Qnz11e	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
414570.988701	CWitKy1a5LN8oVVXJ2	192.168.1.122	50963	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjWoGG2UccTIxl4111,FjFWT71uBoQZTv7mhi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
415146.675872	C5dsx84Kr5PbVX8Tpd	192.168.1.122	50964	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSSf2H3g3UVRleSsq7,FnrrpT1L6jR87hA9d8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
415465.437333	C9xZ7e3siJRVEFUt6c	192.168.1.122	50966	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FxgTdH2PhPc2VC1Hf1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
415618.491317	C5DpDphBmCI5jNASb	192.168.1.122	50967	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqBUNV3y8DzuNZmHMa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
415797.822391	CVchOx24iWV4QjHx6b	192.168.1.122	50968	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5ORby3Lxs07p093T9,FuYEkN3qyLaXIoHVrf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
416403.503776	CDboYiGVE3hbUWX8f	192.168.1.122	50969	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FF4cs43H96OFBSbFT8,FvHSG5scULs9v8ytj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
416713.985511	C8HAZX1Nez3yBzG1kd	192.168.1.122	50971	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMGrs29v0LObfP7b2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
416892.111324	Cx0xGX3Tmhyec5BI4a	192.168.1.122	50972	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrXhGAajwKNmink54	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
417030.444301	CRvTauF2X8403NLT6	192.168.1.122	50973	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4hpos1AY7PKiJ3Bxi,FRV4i82JUyqu4jiwOb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
417591.120661	CLf1xl4DeqL8i26knl	192.168.1.122	50974	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FihGmKp0mFfOByhl,FBwvVD2nwBPyxIKdV6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
417921.888251	CiYZkF83Ma2henN49	192.168.1.122	50976	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fwy1sC3QBAbNX9A1n4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
418072.968832	CtMnrS3DdvtdRPqi0c	192.168.1.122	50977	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FkbXcG197zHJsXqzXj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
418246.292468	Ch7d661xNvZGJLXeu6	192.168.1.122	50978	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcCQWPTF9JCPs70Wa,FKV8Mq1LWrLO4NjPI4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
418855.969275	Cx0xfrg1meGdDHc8i	192.168.1.122	50979	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4Fcca2Cl7rrX9FuQ4,F8DeAV11LfypRXsPz2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
419154.731657	CipODE43w5y1N2uTck	192.168.1.122	50981	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwFUn84jBLRgNDcqL2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
419275.788272	Cd03lm3Iwz3PE09qpd	192.168.1.122	50982	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGqvkw3Cdf8nPLWY5a	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
419446.117754	Cv1gXk1UJZIXyIOIo3	192.168.1.122	50983	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7aveQ1oHK5Rv6VGGe,Ftk18r3xAxGWaXsqO	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
420000.805148	C4w8za5kKzbv2pXoj	192.168.1.122	50984	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJlZ4p2fcuM8c8KYF5,FF5uNM1utQLWmqHNu1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
420290.568588	CRscZH3b2HloXjwzO8	192.168.1.122	50986	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQY1W313qJqKdUTLlk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
420458.628875	CzuQOk3aq9DZQlXXlf	192.168.1.122	50987	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FzBC3C1AaO9vurqVYe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
420578.946655	CD42Kg4LBNHNpgNEO2	192.168.1.122	50988	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJ8GMi4tRcfqOMtiG9,FOREtu33uNRMmy6f1i	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
421121.626533	CGdTJt1RtoxE5P3iRe	192.168.1.122	50989	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9OcsjJC1T4hgowtc,FAqGVT1mVSOlo1AAW9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
421365.374951	Cn3SsN2kZnDJM1kAfh	192.168.1.122	50991	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJvY9q2NRjCDsTlNq2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
421524.431655	CKw95b2NrkACiaxma3	192.168.1.122	50992	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZ0JQ04remyAn3mRy8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
421648.755187	CfUdbb3hjiZdIZsuAg	192.168.1.122	50993	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fs2uel9udjNPcVkQ3,FCK2x143PmM6u2JsCj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
422237.440966	C3K9va4qmsQW1LCh3k	192.168.1.122	50994	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fts9fb2ZqWCYJ6jtx7,FFUX1G1d6DGmEsyt5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
422529.201124	C2FDAO2H5YJxv6Yv78	192.168.1.122	50996	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCsULFmksa2xhXmt5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
422660.297678	Cs88sL3NnCdf97EUH2	192.168.1.122	50997	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWQqxhQqqLIIGuf4b	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
422786.620245	CNAfhX9Lq5nOoFd6a	192.168.1.122	50998	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIZE1E1wAKYLhg4lvi,Fu9CTc2odjU9AGnHxk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
423332.285209	CBQNHN1SZ92c5A637b	192.168.1.122	50999	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3dP4Q1fbpWy2KYqHe,FaPWmJ1eV8fJ0MHD9k	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
423589.111120	Comqaj1jG7SnVkuZV2	192.168.1.122	51001	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F83xVWBaHTSGZTjXe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
423757.211563	CbQ15t2o5T4sATcEL	192.168.1.122	51002	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwxE31ctVJGY7l35c	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
423881.544951	CytyJQ3AjP2VOesl99	192.168.1.122	51003	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHizRRsKsWidaram8,FeImcC40gJLrBTCG43	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
424434.209462	COP8kb1UZ9ln9ZC84l	192.168.1.122	51004	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxwAFzdZQxjz9G9Nd,FllDfm1TKitpNpsGq3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
424744.982417	CxeCno47LvCjfvERV2	192.168.1.122	51006	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3fZrI1derOrk6KHU5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
424871.053326	CaP0wk1Xm3prAqlY69	192.168.1.122	51007	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwRquF3gJHIS2dCf59	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
425013.371264	CFsrVs1rDaRcD27Ka6	192.168.1.122	51008	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FA4gjp25SDY21SwQp7,FcBnde4riEuEGqvSK7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
425361.542702	C9lICe3lMNYFnWGDt4	192.168.1.122	51009	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4nhCn2WtedUGvNxKd,F4aRVA1FSUuINqTaE4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
425669.317378	C1JbWB3cYjFTm8Qy2k	192.168.1.122	51011	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FF83fM24ydS05Ux0Xk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
425815.381259	Ck6Of1nirS5r1ijb	192.168.1.122	51012	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdUrAs2RAZMi4WAsK5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
425946.703900	CBZwbhSpdoB1vArnj	192.168.1.122	51013	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwiKWM2cT5a6EmbEo4,FI7WIt1N7O2j9uSoUf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
426574.366533	CsQU134ODHVZ4KUvQi	192.168.1.122	51014	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXtvoDwDonSJrBUnf,FKCWB0440BfDRRiL71	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
426846.160773	C1Om0T1iYXQ1hUIMt1	192.168.1.122	51016	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FkBHuV3EA19yvX4ala	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
426988.422155	CgX0lH1zTiBWWasj	192.168.1.122	51017	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6BcNf4v89tZ2MOfQk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
427158.176095	CDJd8q4pqWH3HCpWC7	192.168.1.122	51018	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgtNarnC2DHVM6AK7,F92vIe3QpqUUle4R98	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
427724.860780	CjSWJW2mE3Dxgny6u	192.168.1.122	51019	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPle5v4DdTFRo3jmDi,FmWldGTG7GKwKHVHf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
427990.660192	C5P7tJ28pbQ2xa4vM1	192.168.1.122	51021	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FyhWfX21vyD18vGODb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
428136.809030	C7RId015MtaKCc6Y41	192.168.1.122	51022	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FyPD9D3rFETTb5bGL7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
428272.347484	CvPx3n41tys5nJIaq6	192.168.1.122	51023	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnfZGS1PAfzZI54td1,F5qKRD3WKNIaMfsPJf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
428825.032396	CkpyIU3dQJwHABO1aa	192.168.1.122	51024	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9hUMp2gx5AawSaKC7,FrG0Ev42acwpuwB3h7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
429161.796853	CWu1tEalZozAYDlEe	192.168.1.122	51026	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fnb54B1eAttj10Pvk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
429291.899569	Ctwr0p2OvD0fIr7a41	192.168.1.122	51027	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1xwIElsNO9182EKi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
429427.418283	CMW7en3vcsKKmlzp5c	192.168.1.122	51028	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwCMZ44Amu4bj0S2kl,FP3fvO3usoKL8RTPb5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
429749.591799	CY7KFp4yBgloNI1kJi	192.168.1.122	51029	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FM56Ch19rQyF6jo6O7,Fr5Rht4bUoA4z1Orec	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
430033.364597	CQdann4ksRXYm5Lcrj	192.168.1.122	51031	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FW5Q8L6w9wXmYvDyc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
430185.484451	Cav0Xs4oZTtT67CVA6	192.168.1.122	51032	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqOWxB8ZPfbnk3f6f	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
430336.996129	C4XW4B1C3HpYvbO5r1	192.168.1.122	51033	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcX5qc3opiSsTqrrf,Fn66id4DrIKTzfqCz8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
430948.686090	CJkhxp4baYY3WZ8y8a	192.168.1.122	51034	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fdg7NY1kLE9duoHxlc,FgbdnI1ksStgkfAeMe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
431290.443647	CpfWTF4uFhp8l1Scd1	192.168.1.122	51036	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRqsRk4IAKcDjAUFXb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
431417.545568	CGgXbl1LTVbvt2fWYd	192.168.1.122	51037	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7NEoLNluow7sv3e	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
431548.057427	CISyNeVzoc7Y3h43b	192.168.1.122	51038	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIIrtf4fgoBRuI2PK3,FKpCEQ1m8vDxJBp1kh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
432174.738525	CyNYPg2IqXN2oP8roe	192.168.1.122	51039	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfWzFm3suIXZDlGO4i,FP3KAd1KyqgcbnmX67	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
432514.519825	CgdFMlp30K8VJHe2d	192.168.1.122	51041	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fon5Tq2mXQi4zfBMG1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
432643.638574	CjGXjb1S4ttdyWtgAk	192.168.1.122	51042	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3lwMr4aZizCHAO243	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
432766.148956	C6QCwz3uaFEogs3MFj	192.168.1.122	51043	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYg10E2J1aHB5bYcNc,FhCpZp1HH8TcX3gyY6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
433411.817820	Cm3mez2ECoN1zFgIve	192.168.1.122	51044	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fdk3QO26nzkm0cWZz3,FHxMdM1xLLHUbpYXRd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
433711.591230	CBhXQu1eYWdZ0BJegd	192.168.1.122	51046	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fzu5Al2U9GeN4yBiR7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
433843.664058	C7vbSJ1M4ZAx1WPXt9	192.168.1.122	51047	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FkJEI94CvBxLL2x9z9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
433999.001692	Cbao8l4EHh9osqNrEk	192.168.1.122	51048	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTOcq33memCzBbSnY8,Fl05aN6WzEE9Gr6A2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
434604.672375	Cxd8Zm5zX5ONdU6oj	192.168.1.122	51049	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzGgLK3lO3B8KTlPvg,F6COjN3akIjIhwJHc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
434920.464806	C4ucov4RK1wCf3ff5g	192.168.1.122	51051	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUn85uSOhEOFwW4Mb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
435054.575669	CLUqMy25nTCCACnRY3	192.168.1.122	51052	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfiiFM2qAjk3NpfH1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
435181.902116	ClLtpP384PBVbh1DCg	192.168.1.122	51053	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FV11d719vffl7Rld5f,FJwztd1N19GU4Ybolc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
435801.593127	CldWeo3ePWWbPKzota	192.168.1.122	51054	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZ6CJg3ELaQ7EMYKr5,FBqWte4Qz00I6JVUZf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
436073.358933	C5JPMiVJ0OhC9opK3	192.168.1.122	51056	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FboQL82E9lZd41hcbg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
436204.448582	CuGavW2ZqYfeQxysdc	192.168.1.122	51057	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmnVMR3FgCTCivbjLk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
436380.786021	CZaa824RHYOIHpsWl6	192.168.1.122	51058	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnmPmG1vTzT9VrRchc,FuZBza1bIHtBO6z9Mj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
436707.956352	CHuChBUBc3SJZ1p3j	192.168.1.122	51059	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmzwSJ1ll30HYOU6La,F9aO324W9ubxDwOW5b	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
437018.730592	CtAOaKebRqG4oO0n8	192.168.1.122	51061	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FSZ2OD2xIYyMwyEdJc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
437177.827446	C42Ml2nnHrVPzXMh8	192.168.1.122	51062	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FawJsf4qh82V2MGL12	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
437351.180954	Cumjb4279SjaAE89R2	192.168.1.122	51063	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FK9l1B23L2SnpGZ6Qe,F6y4yq4s75R3SfLDR1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
437970.872235	C0lUTb2mInMQyRhyO9	192.168.1.122	51064	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F12HEasDkyOhEdrO,FFIK721yYoEg13m852	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
438273.685462	CQMri83sJp6gANqZB5	192.168.1.122	51066	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FxlC6MTmu2QImsfGi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
438437.809140	CWJZdnCsJZtMJkmA5	192.168.1.122	51067	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlVrjv1q7PjSPl9uT	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
438558.126312	CG2V8v1WnGk5zdR348	192.168.1.122	51068	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBdk064VnxE6BT2oOh,FVCl4e4x3FUx2pe7a	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
439178.788826	Cm7MNG1VHD16lKwM48	192.168.1.122	51069	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrhS741CZPFpXaqcH8,FCfIpB1SeJdeSmbzCj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
439465.598364	CsEjvG4DtYfoL8PtA4	192.168.1.122	51071	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHlWIH3XsE4z1iYg53	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
439633.698501	C3RJdDwiv9GUgl6uj	192.168.1.122	51072	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FkfT0IKorAYmMsin8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
439791.019247	CFwnbdGwESnbb5Lsg	192.168.1.122	51073	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5D3rP2npCfgGMhVH2,Fz6NHo4FX8kVKb1I7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
440383.701233	CVpiJ61tH3JuhgxgBh	192.168.1.122	51074	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYzO5x3xXn4Q3wtYY8,FBbFeG27bOxJpnpGOf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
440673.505271	CWaBYk2VStf9KcInKa	192.168.1.122	51076	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4LNHL2KpJPOIqoSA9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
440801.598253	CZKNRnGwwYAVwyVWh	192.168.1.122	51077	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FEQv5H1Hsc6mHNQ4V8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
440975.912507	CjrgO43HLjG6dyqzG7	192.168.1.122	51078	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2rYcq4k2qv28VMK11,Fxza551Ejig3wlU2z	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
441601.592498	CLL9bQ1b7EiFMGhmt	192.168.1.122	51079	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwYDFvI8ujEaOabs4,FEb6Ry1aCvQeFjSnD6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
441894.056949	C3RLhi3zGBuORV3BF4	192.168.1.122	51081	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6xouEPgJKbKD2nu9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
442031.115482	CXKW6s13POpzFMJGok	192.168.1.122	51082	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FresYJ1Lhb4xH7zVTj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
442197.439646	CQ5CdJ2CQ9y7QO7gWa	192.168.1.122	51083	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fl8MBM2fQ1booCu6z2,FfGsBe3pLQf7ryhjXc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
442789.119677	C2MT4n152ExcBZWx0c	192.168.1.122	51084	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FF0JD04KxFwJfKHsQ4,FNjq0k45Dk5TQHFzX6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
443081.589818	CzFysV3mE3ZSmuyh15	192.168.1.122	51086	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZcPs421j4lqGTDyu2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
443254.674603	C0Ef8M2rHdHYOU9Wda	192.168.1.122	51087	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdmgqW2FJAmEkBELei	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
443419.986651	CsYlPMjLOtGMtZjP5	192.168.1.122	51088	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ft8blN3dKHDTpeWE3l,FjZg8A1ZmW45acjsH3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
443984.678566	CWCucq1rMrLBdA9MPa	192.168.1.122	51089	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1NtXLWXjknS4bgA4,FpBdM2rXUo2rjE1t2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
444309.476650	CIPWP84TbPhqm7cra1	192.168.1.122	51091	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FfchpIoCup2CBthM2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
444433.580433	CwYGbf4B8eBHOdmkDb	192.168.1.122	51092	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0Zfm44ulXciKQ1ABc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
444553.896835	C4O16m2CkmeYviHzM9	192.168.1.122	51093	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2OYUa12bn3DAPXEW9,FHWhEn4er3I1fKI0o7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
445139.579244	CtzBAn1FFlWn1ZasWc	192.168.1.122	51094	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdyLQx2P8fhxR53YQ7,Fk5XFe1SxlWhs81O5g	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
445481.382063	CUAJd42Ii3B4SpxN09	192.168.1.122	51096	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FscTBb1Ao0xQ6uEXK8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
445608.478709	Cru6IDkBCrfo3Q6Be	192.168.1.122	51097	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlGR3FGVJMVAeFF0i	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
445748.794902	Cdv67D2HtnkDh0SIw6	192.168.1.122	51098	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FM023z1EKY75t5jo84,FmFLHhpiY55xDyoUe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
446373.463214	CFTVqM3I8Urnw95xwf	192.168.1.122	51099	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGMo8r1Y9wjLGOcecc,FwaoX839HWqQvVuP2a	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
446651.286293	CpxkOt2dvAVtzuKIu8	192.168.1.122	51101	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFmmPb3NWbqixvQxzi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
446779.392982	C92SVAnEMB4KvXZRk	192.168.1.122	51102	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fmc1Fs1imOkF2LkZh2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
446914.711071	CrMsvwRbKMIk6CaMc	192.168.1.122	51103	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIcINjit6z60odqn8,FaPDMlmOidiid8KAh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
447519.390818	CaApvy1NyEHHkpwF31	192.168.1.122	51104	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fnpvew34F7LPRAoMR5,FQEHGM3h7aP6FxreJ	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
447805.154517	CBJnoO38j78Hly42Ok	192.168.1.122	51106	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJnapb2cew4XCKHN5j	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
448011.404752	CpxvO7UKhPPERxbce	192.168.1.122	51107	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FpCsUU3R2ksQdlesoc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
448165.718823	C8bMPy2yUKtwgiqDY7	192.168.1.122	51108	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXfE7p4PwC7jysetCk,FvWinx2Z7W9L0ekUX4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
448711.394879	CNVvXf4EgOi8uhpxJ5	192.168.1.122	51109	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FE5zFWAzE9gbOtqLi,FpINYcVnhaqmnZh1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
449067.181699	ChomRl4kA9XUDVs0g5	192.168.1.122	51111	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FicGp92TJxlvB7YOxe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
449221.273367	CczW9yg6buyUOmB0d	192.168.1.122	51112	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FuqFt037trkdsD7Ol6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
449361.589154	CkffUPgqNgGXEwgQe	192.168.1.122	51113	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9dzSK21hK3KtjNZq3,FdDPBJ3qd2Q40NsVj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
449925.259872	C2ifER24s17gtvo829	192.168.1.122	51114	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfINws4xiwETiydwKi,Fixqmh1c87yHTEhgif	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
450226.742237	CChEJo2AeoA2OjfgJj	192.168.1.122	51116	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXp46E2C0tt70mfNvb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
450364.827536	CUjKRS2NldiU2wevYl	192.168.1.122	51117	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4xvjChgFFpfqx05l	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
450506.144871	CHACeA42O6evKpYcB8	192.168.1.122	51118	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYtkod4WRlTs7hxm5f,FzW0zC2sYJQZba7H8b	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
451059.831232	C2GGjwXIBrbRpUEij	192.168.1.122	51119	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhfGqg3ExpvSUiFNm,FHKJA743UqIeFRVsxd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
451356.636744	CNqkdh2b5ai7KLjiM	192.168.1.122	51121	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJ626q3sJ5qoLeXpj9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
451520.719532	CGCoN54319hA5C7kXi	192.168.1.122	51122	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FiYiRn3CoipruwC6Z3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
451687.042735	CI39R3I8rJ9EiHGJ2	192.168.1.122	51123	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBEyTOiAnQ0W1yCi,FeeymKfsjhbUkk7Ih	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
452259.706130	C4gqgEzuv029EMWRc	192.168.1.122	51124	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FX3I9z4AsPEeGNoKe8,FaX9vZ3FyIG0clD5z2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
452576.523231	CH2owm4EZjYOx8zdi	192.168.1.122	51126	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FExSvo1ogIuUsusvY	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
452729.648068	CYODHQK00ezgkLDee	192.168.1.122	51127	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fl6bSab0w4TxGU319	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
452876.963449	CVsHRt3WiLP7ru8cN6	192.168.1.122	51128	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHjTOq2U6tub3zwlta,FMJl8q3ZXc3lXhPekl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
453475.644186	Cs1hjt4GH9kJUfYB1h	192.168.1.122	51129	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWlfhPFaEP2lbnuR3,FAgBhSri0D24chSYj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
453763.117725	Ca0hRQ3ce8NZUSVKsb	192.168.1.122	51131	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FsRojg2w8TcArBARni	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
453910.194949	CfgMq04J9ScH49SlNb	192.168.1.122	51132	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fp59nEGYobXZwuoj9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
454042.519492	C5jHrd2LQ43fyo4gwe	192.168.1.122	51133	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIps4B1X7z50lF58W5,FxoZMH3SL3KD8VWGMk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
454601.182808	CDsUp5ih8j2NUNcG5	192.168.1.122	51134	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMMdebQ9j5oDihNT9,FuZSTz2gBIFM1CoDBa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
454939.973223	CgXu3rdlFqqh2WuJg	192.168.1.122	51136	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcA3e31X0p7wXD7nB3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
455072.065504	C4QCaJ3gsFilVHHtDd	192.168.1.122	51137	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSXBTn3AF2XNftwG52	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
455227.383241	CkZcy74dtBjuzvaoef	192.168.1.122	51138	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDooOO2FpuHAvlauOj,F5wysxJxWAaRMUaod	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
455476.551294	CAuea6CzvNwpgrFma	192.168.1.122	51139	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYIyTa2WDKd4pkrdP7,FE0mf23GDHt7LhdcOg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
455748.361292	C17qDh3KOSyHTZvLwf	192.168.1.122	51141	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQ1cGYdewqfX2VXff	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
455926.444533	C66OE91ExEpyr3zWtl	192.168.1.122	51142	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZ0glG1wAirqldwJM4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
456067.761165	CEX9x3U3VgPqMI8v6	192.168.1.122	51143	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXnT7F2FJpfcfCeTjh,Fk4C2H259HaTDYX5pg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
456661.425100	CvxlAD1wV4E3MRpxkg	192.168.1.122	51144	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fx6Uzc49MiGUHoezp4,FhrRobfIViPTR66Ag	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
456968.190453	COS66j3UBeLRwnaxSg	192.168.1.122	51146	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2IagD44dvVy7yZZe9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
457118.257084	C5HqeBx6rkZZta3y4	192.168.1.122	51147	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1Lki42FMD3kAN4je9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
457246.576004	Cf27O023rQQ12PcP92	192.168.1.122	51148	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FouoEn240OYenPOoo4,FrY3zh3Ic5FqMl07y1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
457561.756117	C2nZCCQ5C473j8pn3	192.168.1.122	51149	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fzd9pt3toAyddG91g9,Fwt7Os1DSAffTpfoM5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
457874.572852	ChIzFL1jkdWJGYN944	192.168.1.122	51151	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYYuttX5tfAqZD194	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
458017.680390	CstioU3PCjqTK4cesa	192.168.1.122	51152	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FkKH6Q2RHiab21MAdc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
458191.004138	CzG7Xy4jexK2iEOQy2	192.168.1.122	51153	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKG4aO3Of5t3gAhP5,FE1Cxx3cysdl0mpr4g	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
458825.676664	C4ipxK3e0NYg9dUY93	192.168.1.122	51154	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FS7ptu4z7UlHYSnaFa,F0uDH83qNR2E5jwCgi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
459120.458925	C1FIDx3N9pfWbvaytc	192.168.1.122	51156	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FkMOvJNrenSI9OS0b	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
459299.323138	C9j6S930u0PkXbXiMb	192.168.1.122	51157	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F93fw91uubSMcyjG5c	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
459472.647191	CX3ow81dYOSZP0rqI8	192.168.1.122	51158	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2YhXB1c9M1RM9Ghyk,FG04h2217zhDJQ3qp8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
459777.816140	C9Y6NNNWR4hVBYwp	192.168.1.122	51159	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyGOrQ1aEZRGIfx3Z6,FDV3k421ZLaStuv4t6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
460078.585141	Cu7WOsDhvpdrf11Jb	192.168.1.122	51161	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGb7fg441DlFoyp3j8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
460233.646305	CnuJAjRqIVPBoNwv7	192.168.1.122	51162	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fofqdc2PDWhaliUS9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
460403.965851	CHPZac2x0g8zbXNvC6	192.168.1.122	51163	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJOIUd2k0DkJubSFKk,FgB4jkGzvwlOPmpll	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
460690.137421	CvXhlp1o3L5xgzOoTg	192.168.1.122	51164	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQegZrJJRXsLtvs7j,FfOQ2bv9cVk216Slk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
461016.916360	CHR8EUAXzoGj2oge2	192.168.1.122	51166	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzwSCw2ipcBWDg7Yh6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
461180.988743	C8jSmK3ho8kv48dg22	192.168.1.122	51167	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FVKLTc3ArLG4CFOTNe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
461350.306706	Ch4yTt1TmAEkt2JU5f	192.168.1.122	51168	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F11cpK1PLmhCgymvx8,FBOOez2kvV25Xfop01	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
461669.495708	C5Mwcj2ux8adBmihfa	192.168.1.122	51169	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQKftx3ghLnJ5mG0C1,Fm6bli32woZHjutUih	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
462005.949268	COkKHi1AX1i9VEf7yj	192.168.1.122	51171	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Ftw9eE3X46VIClwd78	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
462146.016058	CD5MwR3f3ZYinWCh85	192.168.1.122	51172	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWO4vA2Heu101Yftqh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
462295.345159	C27ikw1E57vVvZjsA7	192.168.1.122	51173	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPHVdl2rY9xTeGHZyk,Fnx1vM2n6OSa3rjU42	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
462625.520015	CJ4WwM3RunUqP1yLU	192.168.1.122	51174	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBxrUreSwH5qQ77ke,FysjOb1WSbh39Ol9i2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
462929.304553	CQ5w3G43xj01o8lDEd	192.168.1.122	51176	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHCPYV3QXkTg3qrI7l	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
463060.380783	CqSJDUihONBtpANkf	192.168.1.122	51177	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRxNxt169rAkMUB629	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
463232.703429	CTj8ML0ENwzEKlNSk	192.168.1.122	51178	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ft2LSW2HGLgn0M2JBa,F34Tyq3lZluNr1pFNi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
463881.365598	CjQAJF2NfQq0b635Vl	192.168.1.122	51179	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8Ic012UnNVTYEvmxi,FAN14E2Pw6aQgvfld5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
464190.122077	CRqSgR3hjPX9ZN69A9	192.168.1.122	51181	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F22IPW3c8H6ud6Vg7g	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
464355.163084	CQYSyU34NLO4pSOVK3	192.168.1.122	51182	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FsTXdq2rRz3bunrBci	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
464503.479952	CtaXXp2Guy2uXw1Osd	192.168.1.122	51183	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4BC4zrKtiZvn1sW3,Fsu7IZ3QP6tEfGTK16	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
465085.156507	CHizPR319Vl1b8hTXc	192.168.1.122	51184	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoPE7q1lx6ZQdcaEBa,Fvv6pV34uRgWfum6G6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
465374.614558	CwMb4240VvC8luGm5	192.168.1.122	51186	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRVrCf3KXVFuWvhytj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
465547.646968	CVwaVWctT8VLIL0ui	192.168.1.122	51187	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlNZMW3KKiOXQ91coh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
465708.963149	CiPoyR3fVkwy82nvMj	192.168.1.122	51188	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMYA6O3oFVEBoUe7wi,F2ffqU2U0TjznzfpN7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
466274.636507	C8AkhUdip05zg243a	192.168.1.122	51189	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWsFsp31T4lKSz9iM9,F7vje74DjiYkRJfXfj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
466570.110008	CAa9PK3fpwXZCi7kP4	192.168.1.122	51191	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXLnMd4vIjuBZCBv34	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
466728.194336	CGUmdzltwyBeLkh5h	192.168.1.122	51192	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FB8chd1dKwQqDY9MXe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
466894.518090	CfEwQZ15pwGB9nMJj6	192.168.1.122	51193	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWkQ5t2kWoNAwynCzl,FSt49N3PtJa9h5vsFc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
467220.696759	CKaYkd1XnH0nCNf3S9	192.168.1.122	51194	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fq2ywk4CySXGU4DU1g,FhukLD2ORWDFqsnqC5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
467533.465067	C5JPTn1F5RL0E2DMHe	192.168.1.122	51196	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FvZZVv41SR1XAGJoY5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
467655.157095	CdsIDi2LQmHNOzIk8g	192.168.1.122	51197	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6VXc02CsRZJRWXIba	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
467811.477193	CVwSeing3UJ7IgBN3	192.168.1.122	51198	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Frmwqq2BV1Z10YzL69,FZEop63dqEq5lLIr59	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
468405.139897	CM07SD3x8b34Gydln8	192.168.1.122	51199	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYUbrJ2e6fcPrwhjn7,FcaEX139S1vbTvph4e	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
468745.893090	Ceo22p40zJt7qBR0R8	192.168.1.122	51201	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6t6xk1ZNeRLyPUyV3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
468891.945240	C8oNRtF0TEuTddqQh	192.168.1.122	51202	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQSBkn3O3hiteizYfj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
469052.260132	Ca9FS38SPbD0WfCJ	192.168.1.122	51203	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4bybX2sPCUgghGDSc,FAmrB73K2ygKryQJab	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
469655.928151	CKNMYp2dIkyZlGmCJ4	192.168.1.122	51204	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fp4Bui1kaOd7lLsPQ,FeAoIAZxvBQZWJ3m	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
470011.419909	CdTZ091PGZdS55MSd1	192.168.1.122	51206	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Ft80fe2h59fp7oAuEf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
470180.678101	C1xFd02xru93B92NXh	192.168.1.122	51207	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxCffJ30GzXhzueCgg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
470313.002592	CfyD772wNqW7PYZeTd	192.168.1.122	51208	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDpDii2CqgGEAyrzXd,FYwANxOQso0hpzja6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
470895.671034	CpgKcf3G8OBr8Lxfr1	192.168.1.122	51209	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnRTRS3He7chkFAnKc,FNZmnY3m4xtLF47eOh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
471195.485607	CElNyP1rplfCWCIyk4	192.168.1.122	51211	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDPfHMnI4GOf6HrW	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
471343.590835	CSOOFU2AwmL2PEjk39	192.168.1.122	51212	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fzx0Wqu1ZWCkBwrKd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
471467.913108	Cf1dHK2kMPAjOPCPJ5	192.168.1.122	51213	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxcWs91NhnTsxGfihj,F9PNgS1EXQbnUHKFzl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
472081.585678	CnXJqp1EJgsFkfXEL	192.168.1.122	51214	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfVunu2zXfGXT4zry4,Ft8snObUd0wDHMtP5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
472395.366736	CaDJMUnLTrcsGSThh	192.168.1.122	51216	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FS8nbv4uTxnIxm4oBk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
472517.428807	C0Z7aR2mwdhTykPS8	192.168.1.122	51217	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMSs6CbqM21qLz4Qc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
472684.753332	CjzVqT2IgUn9YfPl7d	192.168.1.122	51218	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOfu4P349u1WYiqmx4,FOtFWi46Ql7i2fxI8c	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
473011.924206	CB9EzO3rrjT1K66sh	192.168.1.122	51219	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fk36VF4O7JN0j4Opr1,F1eJyFuMgJQN4ENUd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
473351.419101	Co6jOCKcTNR18Hia2	192.168.1.122	51221	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FiSGxP1DmYNFS5Cb03	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
473479.491691	C7RoJr1LAKpisXZFb1	192.168.1.122	51222	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0co5n2sVb8cQsNc53	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
473642.820532	CFiJPq3InO8FPhymaf	192.168.1.122	51223	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfvQKLcmuCA98Ycn6,F6dIdh28RszC7qEbIb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
474204.497963	Cyk8BS28Mvp6wFuPxg	192.168.1.122	51224	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYP2WV2t5TieZo4co1,FVyStFsL7GiLqCEE4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
474463.266547	CEgxFt2gWrsmGsUil3	192.168.1.122	51226	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5cPLq9bmdC6zQYY3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
474598.369610	CPOYw8ow5DsBywUch	192.168.1.122	51227	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIs4RbWGeUyXycevc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
474777.692005	CaGeAh4GiqvODCCwG7	192.168.1.122	51228	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmgLYW2YBN6TedtZQ,FtghHK1sjqBnNNKGea	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
475076.860119	CGW3Ga1W7vludAYBn9	192.168.1.122	51229	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvvXJt4IcQeAI3QBnf,Ff5xY51V43ae1gxAT6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
475329.646920	Cs97hY25Adpsx0Zfpd	192.168.1.122	51231	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZrGoF4Jes8dV9eyx5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
475483.703190	CwFnag3SoqHSi4QWF8	192.168.1.122	51232	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLsbd91qvWJiezcCm7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
475628.024665	CtQx4527OUMSqesFik	192.168.1.122	51233	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAq9TU2xofxBQ5GHb9,FeSPin2nBnSpXiHaz9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
475907.186031	CD3UYu1qql7yZeOSSg	192.168.1.122	51234	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtnXJpMk0gwPCrPgi,F2V7V83pJuT5s4jELc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
476199.975787	CGrtHHHojxmeGm4ra	192.168.1.122	51236	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTbNNx16LFTeXUaRg3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
476356.047139	CPVyVz2q3Y9cEZU276	192.168.1.122	51237	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FX9Raz2SCtVtSIMT2d	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
476477.396986	Czizk34bKfhthBbwDh	192.168.1.122	51238	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fmj5pgotSYSpLQXa1,F3wcSt1lIt4mpgZtrk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
477125.087203	CMofv24PaA9JV9hXLj	192.168.1.122	51239	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPfh9L3C0hfFNFpsj9,FTG9Tp1M7p5cv8CAY6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
477437.871267	CVo1Vj1oCswMenBCF5	192.168.1.122	51241	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7GYg74bENUsyNS3c9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
477609.930076	C1uHCs1EMfLyIhy6Wi	192.168.1.122	51242	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FllbrF4HQSePy7c2wh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
477743.245819	CBdRrV1w2FUQiR4QJ7	192.168.1.122	51243	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnkLTy2GhAm82r7fAl,FSYNQi1uLBOjQ8MIua	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
478314.918033	C1XwaXKvuXFc7kyU1	192.168.1.122	51244	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvNwoA4E9phwvlwMtd,FeCu4V1OYkVGPjTGv3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
478644.707634	CnwO1AVad5mnznlF5	192.168.1.122	51246	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0BI163zUam9WWRUFl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
478774.774597	Cb7TWcTj6WKYyRss	192.168.1.122	51247	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FaT6Jr4Uh5c7Da1SXg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
478923.092295	CH9Isb4cErMReQYjJ8	192.168.1.122	51248	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFgWgg38gTl5Tg5SH7,Fl4ZzC3OmNoAh6tcl2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
479474.775743	CdF8MO2EBrvkTpJCc2	192.168.1.122	51249	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6CSDLMYUqISCCjR3,FEPBF8EU9Dyb3ciZ9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
479761.257022	CcEWBG3lXnEBII0fo4	192.168.1.122	51251	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FitsuX33BcQtSZIKN	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
479928.333252	CxVnda2xqPVGHYuw8j	192.168.1.122	51252	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmDsIe2BzBMrbd5CH6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
480084.652553	CroOeg1xxhRBnY5fKd	192.168.1.122	51253	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZOdy4tBziRrWBXJd,FyXehr3PqAB0IoHP46	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
480678.315923	CiS14w2laT9MsBO349	192.168.1.122	51254	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqGud54gwlKqXTyXof,FvtE5R4G9xyOJJF2i	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
480958.799602	CTDzR530eqkEkdL7O	192.168.1.122	51256	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmnvKT2TiTb7ZqFu69	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
481136.860816	CVqU9A3LQRCZAeubs3	192.168.1.122	51257	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrTdZI3EhVsXTqJxw1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
481300.180122	CUPbSe1JTKbK1p3hU5	192.168.1.122	51258	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxGjUz3PEUYhPTDZq7,FO3w8e1u9dxTNhkPL2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
481911.859439	CLVVle2YtRF7l5RJG8	192.168.1.122	51259	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeplYb1K1dvH107Qx6,F9GRVl1jbzTdmgE6B9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
482210.682102	CoZQSQ2wYnpT0WVsCj	192.168.1.122	51261	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCfeaCDTVZTiYPf48	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
482354.811895	CZaLzK1PgzQPm3WvE2	192.168.1.122	51262	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5o5OhQbMQcBleZD7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
482483.131068	C9BwBp7vE5wdKsz5a	192.168.1.122	51263	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfU44T3Vn7q4L68xGj,F1HnBZ1aOV71LDAnMf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
483126.816275	Ck7bej4pDsrZ5W0cx5	192.168.1.122	51264	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmxizDEs2QVvtEjP3,FumWH54S82Qb1Fo46i	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
483429.596629	C7kx0h4W6krrznkOm4	192.168.1.122	51266	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4jetu5TGfjVj8k29	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
483607.683428	CNsZfb2H9uYEPcare4	192.168.1.122	51267	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FiQvI2gYhXIi0yrJ9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
483754.989437	CKRtP71bK3maqnxJA2	192.168.1.122	51268	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FID94jchVX4HpAF5k,FNKq9n2cQZg9woo4th	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
484316.656118	CBh6Ea4CmBep0sGNK3	192.168.1.122	51269	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNtFG12L65GubF3hKb,Fcbcfi45q8nuAqqihk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
484588.472379	CWa14J3vV4BYLKteij	192.168.1.122	51271	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCCpx9B2Zn4XSC4Xh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
484723.588119	CbKknC3LHU6nIx1F0h	192.168.1.122	51272	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwiS3b1yIb3l3i1Jx6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
484859.918185	CMVaOR1hlNqNXfgAT1	192.168.1.122	51273	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPDFrA398BX3HPaNCk,FcgS8P3XwpftfS0dM	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
485508.580996	CfRZXm4GbvP4iyzEN6	192.168.1.122	51274	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fx0mEcCXLsS1MyZOg,FDgfMe4UYrnICt904b	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
485787.385789	CIaP5q3Ov3fzdZ7tVe	192.168.1.122	51276	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FvktvW3Ke0DFE2UQ91	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
485948.468861	CbV3Hu1u36vSEB9X0d	192.168.1.122	51277	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F95Uwa2ovjc0poFKB	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
486089.786947	CGdjjw3xbTf2R9AYRl	192.168.1.122	51278	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9X3xc24YHwn09jpw2,FVmk1o4q6XDfBLfyA7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
486420.972512	CfpCH3dBn3Nzlq43a	192.168.1.122	51279	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmejdT1bnCKtkNNyfk,FyhX6H3OKpPsp4wwcc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
486728.747090	C6PQUCTCe2IzMDP71	192.168.1.122	51281	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPxi4w21ffOuyj0ijb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
486856.804673	CO7Uje4jonqaUUoxof	192.168.1.122	51282	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMpUgz39TyE9WL83a6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
487025.121241	CbXJbN3hkyS8fb1Isc	192.168.1.122	51283	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FR4kZO2yW68i3m53kh,F5CN9k1doFYksvxQz8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
487682.786739	Cet8y61q7cZbF5Nv4g	192.168.1.122	51284	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBkEhceRlj9YIaGR,FmLkmh3lCwO9zj6jCd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
488001.570350	CM4ZI63lhYLa8g3wQi	192.168.1.122	51286	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FziRBY3AgMeshhS4Nj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
488129.644809	CXlZ282wbb7T0I5Bz9	192.168.1.122	51287	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcV1Bw4qaDoWhcvCcb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
488287.966611	CsHN6o1GtNxEEU6PDi	192.168.1.122	51288	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQFPx24elus5o2FOG,FnmyghXHE0ZFYYQM8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
488580.136805	CRyh3zKAAQEZJIFf4	192.168.1.122	51289	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUZ8ri4LPJpje8Tl34,FfhR6k26D93IbMtzh9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
488858.919519	C9ZtMc4OzFdhPFfXpg	192.168.1.122	51291	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F9Zcls4lpCeAlXJYT4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
489002.990632	Chfoiv1JNnPNjVaZ6f	192.168.1.122	51292	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZGcH24NE5O92mYczh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
489163.305662	CBzY1h43g9rHLEYCvf	192.168.1.122	51293	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F15DXW3b5TPbS4jNC3,FAxTF23GCWxm0NQHvg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
489818.968140	CqP8tP2R52s9S3Pprf	192.168.1.122	51294	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcJx942rPheo8rscUe,Fn4xKL2ZHK1VaLGN2b	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
490157.787658	CUvnNv1OsGD7px1Xw8	192.168.1.122	51296	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fe0sCuRF7WDGtrprg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
490319.883655	CjUqgc2tuoNMtvrkmi	192.168.1.122	51297	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FEctLud1vDTYZaxx	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
490488.210524	CIbsHd47iufebVYJB9	192.168.1.122	51298	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2XBxo1JAaOe9vYotg,F57SXoVGSOFJCOln6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
491050.879408	CuP4eY33N5zbzNQqs7	192.168.1.122	51299	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQ2WqQXLEwyKFQwf,FXE7m41iqoH6N2mQia	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
491328.359911	CHBAIlJOTluw7UQI	192.168.1.122	51301	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fx2vT22EOi3fHzLV3a	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
491508.824487	CwYbs93wx4pPzebyW7	192.168.1.122	51302	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgKetn1JALyhOuVkYe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
491664.139799	COJWkDtV3uIbi8FE8	192.168.1.122	51303	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBcNOuN7mdUiH0zGh,F29b2X3YFmX1J3Mzm2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
492308.817827	CztA2KrzzQ2rgyGWd	192.168.1.122	51304	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8YVJvkIvfoP3jP19,Ff250n4s54aNc1doAb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
492581.588415	CHQxoM2Q9EBeUcRw9a	192.168.1.122	51306	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F94mmLh3jrTgNwVT	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
492713.655736	C94MYn4NpZgsYXZ2Tj	192.168.1.122	51307	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZzTB32jo7Ql6y5FL2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
492854.973135	CrXxjG2ZZbnh1KO2Hb	192.168.1.122	51308	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1kwc34XOPDVlEIFZd,FVaRoI33UAMnXfk4ge	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
493487.642892	CSQWRb1lnCrQVDHq44	192.168.1.122	51309	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9xTxb1oSHFCm4i7qk,F5WHqf3Ies3VFssAgf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
493761.444379	CRxtVk1DHhUjuiaMt9	192.168.1.122	51311	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKAyha2Gu4cH8LfGra	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
493933.539361	Ck4zAV37DdxtmCRAhh	192.168.1.122	51312	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtBl4Z1HzKVjNeOhd4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
494083.859794	CiBZmW3kIOu4GAZ8td	192.168.1.122	51313	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlwX1ivDQsst0Bq53,FkaU2E2erU2YXQ5V8b	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
494393.024626	Ca5oT54bqfLykpDuna	192.168.1.122	51314	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fw5NqM3tBUZdjVeHt1,FcCb91pFrxkuTdKw6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
494689.789043	CbIm8P2p8FpZFJAFv5	192.168.1.122	51316	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FoksVw3LGYaroTybkh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
494811.842495	CTqO9Z2FfCBQu19LD	192.168.1.122	51317	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FamGX824wFaSrCdSK	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
494985.165755	CONw5u4SSknUMP7k22	192.168.1.122	51318	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzMk2t2U4NCdWkqnf,FfPnTPUTybqHB92Ae	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
495583.857370	CBtIrf35GumFIgsJ3	192.168.1.122	51319	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSVVYZ8iH8bUnkos6,F1rFWV1DVnrvRvzbt6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
495899.640160	CAmU4C3TPpX7gzDpGe	192.168.1.122	51321	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FM3XZg2x6VmBdM8Ns4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
496077.702547	C6D9kj3Le3sTvzPzMh	192.168.1.122	51322	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMv438QbHXsNTKayc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
496211.018548	C4JY7541m5HNHBK3Hc	192.168.1.122	51323	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnIx1x493UITFxlIFf,FHGwbUjx8o6WPK3D7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
496845.680918	CFWPSD2v8eNLEOhfE6	192.168.1.122	51324	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsdpHWn2Ujd1jAmP8,Fpa0Db3CUWuIt6VsEh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
497169.480491	C8au1Q3B57emHNsfw6	192.168.1.122	51326	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fmu5waLYbQSzYTTyf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
497317.585023	Cg6WAU19qYycE2SbR4	192.168.1.122	51327	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fkod7b1lhrteNpt0tj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
497445.903703	CQmTeMyXZE0B1jVD9	192.168.1.122	51328	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHBrGo2SMjdVXsn07,FvdlfD4LhSiOMvBrQi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
497733.066756	Ce0lPE2EBhCZGBjqQd	192.168.1.122	51329	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVsp9QCOdMidZ2KWd,FcS3VW19fVqtUt4aJ1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
498013.858517	Cr9Oa8IXTVVHqb3rd	192.168.1.122	51331	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FxlOns24hSrrrf0SYk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
498184.931685	Cjddb037cvIsEgHcU2	192.168.1.122	51332	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBDBl9ZxBG92pIwnd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
498351.255660	C7zhN9wk4D5WtfYLk	192.168.1.122	51333	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHidrjyOwp9NsV4lb,Fnk2FA3qW9IBLFUcEi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
498634.473079	CXGKtI1fxjQ5A7qGy3	192.168.1.122	51334	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnvF2B4vaiciFYAZy,F4VMNjlm8vDpNty2a	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
498927.243627	Ck2iSJ1QYZp94hduve	192.168.1.122	51336	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCUsU71pPJLAq9TaAg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
499084.335120	Ck8Iat1kXwY1jCKPF9	192.168.1.122	51337	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FjZYEp30VsNIz5Khd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
499257.659069	CI5h914dUwg34gTkm9	192.168.1.122	51338	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRtxD72p29QacII0Oh,FuBIFK2MxM12oMRoNl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
499823.332675	Cy05AK1EDtByzmiFEk	192.168.1.122	51339	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ff622g1jSUDWf4H4Te,FY0JQp4QANNCTzCyjf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
500092.132552	CisjPU1j5RdtdjI3l9	192.168.1.122	51341	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0fHSGe1XoH3byThk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
500249.210092	CQm1vS2Omko4jE1hml	192.168.1.122	51342	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMKau7GiOhsTuVMF8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
500404.527692	CrjrXx4fxjddZeWiuh	192.168.1.122	51343	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXPWxi3jkBiBSu160c,FcgAMW1DsyUvPv2HGh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
500999.203368	COOqpA2BNFs46CIbBi	192.168.1.122	51344	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTGuS14ESRwpa5tmEa,FSu2I33o88dRHtj3V3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
501311.996243	Cw04nX27kxsXLvCdMa	192.168.1.122	51346	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fq3cTg24g3NcAORhD	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
501455.053568	Ccyuou2c6nOEUMkox8	192.168.1.122	51347	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7F1Vm415Ro8bCGIrl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
501577.383958	COVTZf3S905KLl2LXi	192.168.1.122	51348	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFM0KB1QCbN9TQdXzb,FYtTll21PKLgbmvZ36	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
502119.062740	CuQtLy2VdFnOstd6U5	192.168.1.122	51349	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcNsWmJmQbPAuppCl,FS9fFML8BZ2wz8Mf7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
502423.528594	CJD35F2wBCjuz0rXvh	192.168.1.122	51351	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwfSNp2KChv2DqxvYl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
502553.613480	CGWvx83aXpyffiQkOf	192.168.1.122	51352	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1Lm783IdQN3aYetR1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
502731.934039	ClLbV53gukcNpKsXpi	192.168.1.122	51353	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6V8MC15zllsJJkDPd,Fb4F2j2DaWJlAdc3jl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
503345.606289	CCWrjB37nwlTgRW3p5	192.168.1.122	51354	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F92Kt134GFp10LSBpg,FElelG2pWgmeHWywp	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
503642.404268	CXfR0N2BbhP3ExJ2z4	192.168.1.122	51356	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FF6idN3qWOejy3Uj8j	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
503770.483409	CGKNNEEK2xdjOg6Wf	192.168.1.122	51357	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FuASBL1KtJTIX3E7Jf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
503933.801974	Ctw7dZ18J4JtXEj7Da	192.168.1.122	51358	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXeYZw1M8MLjdCaZti,FUoZXv20mk0eLwWUm2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
504517.471510	Cq5v4b449pvR5oIgYb	192.168.1.122	51359	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fh0trj1nLIpcATuEl2,FmsuH81RntQHFJSkm7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
504807.244856	CU1y0i1N8IHc9ehryk	192.168.1.122	51361	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWcfgV1Eo74plFez8g	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
504961.284869	CEKXLh9L0m5SImAll	192.168.1.122	51362	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNhlMs4nWue9ZnK36e	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
505135.599899	CutkzNdozIlpryzx2	192.168.1.122	51363	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBUdQfkQGeW7JdHxf,F4ly0D4f2ORlNClPJi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
505758.265288	CZU9Mi18b8k9T1SMy9	192.168.1.122	51364	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9xFNF28DSawTm2p37,F0NIKC2RJUAsbBruQd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
506055.036207	C8ktrZMqg8vPkAAEd	192.168.1.122	51366	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FxdsNz3dYqnMHIA63l	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
506222.107943	CHV1SCVJEL8rDdQN	192.168.1.122	51367	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhIEvXGsiWuuJtHNc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
506351.428249	CGequy3B1E3PXeXZ3g	192.168.1.122	51368	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FknUlr3TGu84HfRsP6,FJupTi1Bwa3RWv4fH9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
506966.111861	Cv2euN1JDOa7UaL438	192.168.1.122	51369	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUmlR53NHtYmEZ8kQh,Fwr4Ie3RGCrEJtTGme	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
507309.612905	CkZePW2v4J3t8s6p07	192.168.1.122	51371	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FfuuDAOrwjT9roab3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
507481.718687	C27D8c3VxIS5Y880pb	192.168.1.122	51372	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Ff6HHJ3wfMablWlCuk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
507660.049534	CddinF4gUdvDYAGyf9	192.168.1.122	51373	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fs6XFN2cNN8UtvIoqk,FvUJqT3O61d9rQNEl7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
508253.723124	ClxmBV1v8L67BmIx8h	192.168.1.122	51374	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPQM9G459wjGvJWfmk,FfXQFg3K9QKqkHBMuh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
508558.501050	CEMvCO3EqQl7XCuhKa	192.168.1.122	51376	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFaFyUfkP2WcPRpk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
508699.569833	CTP0Fx32FBg9qsLJpb	192.168.1.122	51377	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FljVAG4rmgwmodNUrg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
508824.894252	CBZXmW3MHbwdJHZeXa	192.168.1.122	51378	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fkp3WD1TCDzZrBkcP,FduALklMohTDYuWv2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
509133.367877	CJrF1A4oZU9s9R2nk4	192.168.1.122	51379	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcwnuU12jBCBRbqz5l,FXkJp84nwJZjF93ts8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
509398.132796	CHbGWNbI6jnCZbfWi	192.168.1.122	51381	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FsiG9b9zH01u8FAKh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
509549.201477	CGZ7Uf3CVyDgG58dz5	192.168.1.122	51382	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRCiBf3zSd3a9YiLf4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
509693.523426	CqnwJ84RWxLPXvfqhj	192.168.1.122	51383	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBtQJvYcOPJJkvZV3,Fl40cs1xvPFUq1KvW1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
510274.198061	CRBGY1wF6LvYDrpdl	192.168.1.122	51384	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgG7L84PbJ3BPxPlkg,FrwBgV1kDOXhcAHXac	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
510583.034320	CWGgdQFKrUqOvRXlk	192.168.1.122	51386	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FS9xxS1BwoAvjEvXp8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
510759.171193	ClwlzW2WcYLfweSRge	192.168.1.122	51387	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FX6iO63siS9qhBWHtd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
510910.492218	CyFdagFw7TtnJ5RGh	192.168.1.122	51388	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmU4Wi3fuQ7mvvlqv6,F3N3ya49dDp5iNJDai	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
511514.171406	Ca3Mv51CJU4BVRDzl5	192.168.1.122	51389	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2gbpSzdqg4dHXaR3,FTYBHb1BRlfGbV3QIh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
511793.970108	CGoHHWbvQmN9BYKxi	192.168.1.122	51391	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHyY634JTyspedatL6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
511920.090262	CVjqadMPo9Uw6GnU2	192.168.1.122	51392	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FVrB7nmsjCtgSvH2b	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
512072.413523	C45m4D4LvNGtAtowSc	192.168.1.122	51393	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fqiano27zNZYFlYFIe,FvrNNt2PUusnS9ABm	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
512705.093525	Crca9IhjolmXgc3I6	192.168.1.122	51394	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeWhyJ3e053QzCxzKj,F9yoZq2TGicFMe1VJg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
512958.889405	CxmCch2hXwGl8qXiq2	192.168.1.122	51396	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FyA8hoWVCkzNIAPM7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
513103.992357	CSB97M1QF82V6FNv72	192.168.1.122	51397	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9OdnWy86mv2ycqj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
513236.316926	CSQs8p4WE18e12zoG6	192.168.1.122	51398	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FK9KkZ2DgDqhp32SA9,FKzmn11tS00UWNcsk8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
513558.770928	C9b5zl4XitJTmriZ5g	192.168.1.122	51399	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSmGLs9k3SUGQQeqj,FkrlAo3g1dR8hudO2e	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
513915.544578	CTi5Dt3zDFD3QbSeY9	192.168.1.122	51401	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fn57IF1W8Sk1tpJXbg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
514064.613446	C0ugyd3ZusqSCsO5Pj	192.168.1.122	51402	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FuIMVO3cAa7rXQSAXj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
514220.942637	CTdLM23WBvg0Bwppla	192.168.1.122	51403	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0LTly332ECSfojbTg,FuWH3qHkGDcyTzPWk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
514795.608883	CD1Id8pxCLvT7wdia	192.168.1.122	51404	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIpM5b28FhEn7ISIRd,Frhzlh3yF3H54K8BT4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
515098.376751	CA2C3S2pEojELGLhS4	192.168.1.122	51406	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDYxZK103v4ROCfTjh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
515252.441830	Cl3VKE2kplPxvy7ni5	192.168.1.122	51407	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmtpT23idpXd2nCsyi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
515375.762984	Cmlr7w3icTsPfWky0l	192.168.1.122	51408	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFwSCZ7HhKjQIjlpa,FJhSj537CgEenB8YJl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
515973.442639	CTyRI73Zp8JNLLXwX8	192.168.1.122	51409	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJW4In2s95rzAmubMd,FuvfufK48un4S9Jf3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
516286.249113	CsIPnxdAHgQCvXRj9	192.168.1.122	51411	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdV7gp1lVoM3vbH986	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
516460.327955	C2qJ4vB0SFPCXd0Fb	192.168.1.122	51412	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FymlxQrSIzZasDzX	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
516620.643331	CP8F2p4MVdiGC53856	192.168.1.122	51413	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAE67o095qcdAy0x9,FlKW684hYEeML4NcU6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
516874.828333	CThNiv1hDRCjbxXXnf	192.168.1.122	51414	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fq57sx2iAflQujv9Oc,FyglXQ2afItyCSstNi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
517151.312424	CFRsvG2yokvgidL1fa	192.168.1.122	51416	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fc5dqS1bP5C8DZsyG2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
517276.411490	C2Xzf92zl4GAIzrZ04	192.168.1.122	51417	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fd47tf2dNLGwpdmqWg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
517430.728058	CsB26YMMnHUyQXs2f	192.168.1.122	51418	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnOOQb2keEJpbWoOel,FRBrhd3CO5HrnJ3We6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
517999.414736	C4W62a3N5Ggn9LijZ8	192.168.1.122	51419	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBzqUudugtJFGjqV6,FFQMQv2hp7mtKA0Ro8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
518320.197324	CcvpRIaaKSP3Lb5	192.168.1.122	51421	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKxUV2Xiepws51LNb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
518474.274392	Cxtij14UH1yR6PAAk8	192.168.1.122	51422	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcfBty2UsfyqxuBdYd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
518650.591575	CGFJd539ZszveYrwV4	192.168.1.122	51423	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLtWp6423HRZZa0IFc,F8H8B94yCxabwyxYt6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
519267.278051	CbzG0Y3dy6QGZCAsX3	192.168.1.122	51424	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkYaz44FxTHF5myWM1,Ftp4pl1BHuWVLY9Mol	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
519550.087110	CbpE4Z3Y5lKsfwbEM3	192.168.1.122	51426	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlnJ7C1PJtAuo7i7G5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
519716.529825	CaaK4a19EJuLk510Gf	192.168.1.122	51427	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FCp9vc2RafCkicqZJ3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
519866.848116	CJD2KFpZ0Dc0xQbL9	192.168.1.122	51428	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiYLQR1GYVQkM146Oa,FSrNdn1kh2SKTFiLn7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
520431.522374	CvElcj4GEENNo8vvr4	192.168.1.122	51429	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fp8es14CKG510ycbB1,FWFvlT8gKN2q1MSWd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
520752.307414	CizPZtoroGyg5swq1	192.168.1.122	51431	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDzsMRVubGLQYnnFb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
520884.399110	CWOnYGg0Xj9EXY0T5	192.168.1.122	51432	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FV4SJk2GmxRnAbTPJd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
521052.715195	CLQ1nMOWVS1Fmw6ab	192.168.1.122	51433	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fs3qWO3KTnNnLkeo1j,FqmcKf3l1LsB4aEoac	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
521314.181126	ChxfMm25oGRRkIk0s2	192.168.1.122	51434	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FE6dWD3ygdle0HzNY3,FXCe9rnueJNaVKy04	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
521645.951717	C4heze3Z19XQOvtpV4	192.168.1.122	51436	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwO7jE1O3hpJ5juvH8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
521783.010993	ChouWL1azbpaWZQrb	192.168.1.122	51437	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlHuUj1OgD7JOhlDD7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
521940.331820	CcJUGv42QFZfjkweK8	192.168.1.122	51438	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzAxeU1YBBRmYtmNLg,FlyzUL3dfg4HhUjjZk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
522530.019275	CpkxxkZuUmLDR7yH8	192.168.1.122	51439	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ft0or1MP2tJbebcf,FtDaCbbUOwUq24Id5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
522805.812492	CV4L9y4B944NTp28xb	192.168.1.122	51441	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fff3DJ1r9Y4tKiotp9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
522983.888349	CWIvVo3sxfHU1wcTPf	192.168.1.122	51442	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FbRl0U1gO5rrOfeyze	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
523161.216710	CNUkBL3BE5Ui5fiQwh	192.168.1.122	51443	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSsDZZ2webNLJhGeqb,FuoTVm3h2HuCBIRIUk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
523756.883289	C10jPsWNDc3pvluk3	192.168.1.122	51444	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXEAnLPOYpIz45qE2,FKt5zw2eY2jiyKaVn1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
524104.625593	Cdmy9i43OXHpgQexJh	192.168.1.122	51446	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDxvy61cXUAAwD3dZj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
524266.651840	C0rhMN2qDM8EI6knog	192.168.1.122	51447	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcdXNP3DzUBcF99vDj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
524390.975292	CQLFHA2KBZ12LgBdxc	192.168.1.122	51448	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQZgHB4TQYinB7xvRg,FN9ouU2lvnF1L7tL4a	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
524949.638431	CftTO12ZzpXyEOlNG	192.168.1.122	51449	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSYHYl4Nf1NSBvkAS7,FfIg5K3I2bjhKPqNaf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
525253.421295	CO2DAS1gMdufn2fua6	192.168.1.122	51451	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5zNcU11s3BmuSsrD	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
525375.506411	CEWKDMIesVQkEACtg	192.168.1.122	51452	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fw22qA333BjZehDiMg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
525553.826799	CG7k0t1AeC6rXymnId	192.168.1.122	51453	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKZn7y3rYikenDbVo5,FWzs2l3up8eKi8YCC1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
526187.497772	CKsUBV2i4qMlmIIu59	192.168.1.122	51454	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuJNxN22lBZ0GPTcqf,F0GHab3yXI0zn2CmKi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
526519.284008	C45ElN2SgrojLV9qi4	192.168.1.122	51456	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5DY5A2arAnZkmx4F	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
526653.363768	CO1K5b4yvNGgUkIme6	192.168.1.122	51457	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fq0wZl2CLbRr97nni9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
526805.686846	CVvM8kqAKgS73rgqe	192.168.1.122	51458	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLWzEo4ZFTn5SgXsNl,FiwDUNxNqc5Is8n1i	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
527444.355216	CHmreQCF51rxsn3Tl	192.168.1.122	51459	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSLO6urnITiIJKdKe,FCS9MS2ZaW2BKGVkPb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
527749.105989	C7bkCg46do9SqGQx9i	192.168.1.122	51461	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FjJwiuIw2AAG68gCe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
527920.164700	COT9BOtUTBGQ0vwu3	192.168.1.122	51462	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Feevpt4dIzP2J0Daef	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
528092.487365	CiaWau18VyS9wKeaXg	192.168.1.122	51463	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyJAZU3e8TA6Ocmof8,FIPZGo4FtMzc4efz12	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
528685.178936	CNrD7Q1Jp1kFqxMaub	192.168.1.122	51464	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F388yfODjdB0wNxTb,FX3wJJ3Z48ErH9Ye4b	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
528943.649441	CA6yUe4Jz9NGYjzckl	192.168.1.122	51466	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnmmtiyVJ5lBR2ELd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
529079.722216	C5GSHy4PW6xv0nrhv3	192.168.1.122	51467	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fojlx24lKlOIcG4wk5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
529235.059614	CoBe4Z1XcTOYbIQm7g	192.168.1.122	51468	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLwnMY1A1jo8YjRjW3,FKFQBy4zHOxONQtgD5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
529881.732694	CD0Q753q6JZrv6FiZh	192.168.1.122	51469	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fh0bYI34hZZ0c8pUej,FGqyc4TUWelLgK9cg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
530183.517201	CYtbGe4hzrDN258Uhe	192.168.1.122	51471	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqZaBR3O8lB7vf9EZ3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
530310.601875	CYBfcD4dthUyRZOwf9	192.168.1.122	51472	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FefKGm3fKZdGY80baa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
530482.923792	CEYyAjZuEVDWZqWbc	192.168.1.122	51473	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7o5y34S4MT395RLhb,FWu7jH16R1KfENANQ2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
531056.596117	CMuwOqCECkXuxRrzb	192.168.1.122	51474	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBLV1oqOdBhWmjMr2,FYSS8A4mXwjoTyfyv1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
531408.370690	C8NPjF4wE3M81Gn9Ck	192.168.1.122	51476	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0XQsCz9FkJM6t2Ee	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
531570.442906	CIQRvN3uBnTJayrl0a	192.168.1.122	51477	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2tRPs2XO3NFK6DUdb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
531737.757863	Cbq6YQ3uCyXWhkbzve	192.168.1.122	51478	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiT6M51AdqCsdvFCTa,FSohXC4s2Ip8GLmJma	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
532088.232101	C6zv1q4GdZprotwle6	192.168.1.122	51479	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlxDCr4xaf0siXq452,F8qP7U1IoD9Wwybfsf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
532410.721608	Cle9024URGkpxOHsha	192.168.1.122	51481	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbVvHX1k60e1qsP08c	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
532537.813802	ClqYC014unso1WDh55	192.168.1.122	51482	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fohx8B4oTEX8GgJPSh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
532688.144330	CTKgVi2GYRBFImtqj4	192.168.1.122	51483	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaOIgi1LBGKpkTUmG9,FUjBz63jnsSx0actJd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
533308.816690	CYDLTy1OLA8XRZ3n7f	192.168.1.122	51484	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6cw9ZXEo1GdCPh7,F0SUh54n5b8i6bri0e	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
533627.584853	CBAtaR1YIv5hpGN5Ia	192.168.1.122	51486	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fdt8Io13zNGwIecTvg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
533774.662257	Cq985IjGK98yx9Qma	192.168.1.122	51487	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9oIE13XtAWjqiyT87	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
533914.978433	C4g50w1vKIxgiHTPu8	192.168.1.122	51488	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fel4Cp1pG6uctHsLs2,Ff9J9w2Yl8CPOwR1i1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
534528.650567	CS78AT1K8mfAvpCsKi	192.168.1.122	51489	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnfPz63JcJdb22LAvj,Fpq41r4An0j3cZJVj8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
534801.416758	CuQYkUi6XfFG9yuR8	192.168.1.122	51491	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNqQHl4AGIgkaBbysh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
534980.475583	C8anJW21JVWKKwCYu2	192.168.1.122	51492	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDoTtc1uWtWxIEJ813	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
535132.799023	CBwQXX3u0nbcxOqm3h	192.168.1.122	51493	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPaBppe0xg056UVY2,FOV3Pi4q4cARHm70ha	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
535428.965294	CVUdcq3uBWkleieWKk	192.168.1.122	51494	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fm3ZjOx3CpfOErPEj,Fae9DM1znOUL3hxI4d	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
535696.762645	CFwCKO2P1oJufMcjF7	192.168.1.122	51496	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fgzpgn2Hn5I5nCccEe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
535851.828598	CD9Au62MSzwzGlIfR2	192.168.1.122	51497	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FEicVw4culRA5sGFPj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
536017.150736	C0WsrE4URtOs4lgdjb	192.168.1.122	51498	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5CO6o2bn3jj10lXzh,FFlCQC3wGNvoAjzIDa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
536575.824196	CrQqw22dWhhX2Mn8hl	192.168.1.122	51499	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3wILwps5XGEYpbQi,Fs1C95cGEFdjfAw04	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
536841.618482	C2oh2x16OvBVe1YNU5	192.168.1.122	51501	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FvlNen2tf3EBr5yp4i	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
536973.701598	CKDpm73GV8Ssc1A0I3	192.168.1.122	51502	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSzbj63fYkoQyx2fz7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
537147.025364	CrNmLX3p8uB5YpKDX2	192.168.1.122	51503	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4sUHXppR9UDUzSv3,FE24GH3BRTlaf7PSgb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
537785.713484	Cz6F7zN7gsbuRBgS3	192.168.1.122	51504	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSqVfk2qAnUGPqjWbe,FYPEUhiMa6R4KOilk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
538108.490253	C4eFqr3Kpg11EplGoc	192.168.1.122	51506	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FjtFeG33hctX7LvBpe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
538281.552178	CHQZ794zzPzSdCaqzi	192.168.1.122	51507	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FN5OO5g6Ky9oxpuUb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
538406.876871	CfwqWHlcnNSDxoAI7	192.168.1.122	51508	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCbc1k34Q6igPet4r7,FoWfEx4kfZbhkuXcqj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
538665.047707	CNppBo4da2YMgRXcGk	192.168.1.122	51509	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4NIsp4DBqQOy1uBk7,FRvuZ22dQgjEDO7GTi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
538951.816747	C5odgpfwMUIP8XBL4	192.168.1.122	51511	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPEEUS2QNf4DMWXQqa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
539110.895248	CPSiUK2Nn8CMHinPUf	192.168.1.122	51512	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FjGSbX18m1DXnMBTV	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
539288.213484	CpmnqA3FewuxhBqm4j	192.168.1.122	51513	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJLqkC2d253ELM2Sx6,Fz91ay1e7I543rqrr	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
539933.892309	COfjKd4MxDRB8ta9D8	192.168.1.122	51514	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgRd1k2WInIrTmqstj,FFhQCp3vZV9wfP25a	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
540251.350672	CKTi2yd5W0Qcjy2Xa	192.168.1.122	51516	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fko93UaQt5h3xlzl1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
540407.418734	CtzqNgEyMxRBa26fk	192.168.1.122	51517	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FpFR3mBbtu9fwk242	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
540574.735096	CrMWKy2qOjE7Ag0kSg	192.168.1.122	51518	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwLdGb1ZM36GNjyZU7,FQS6J52MyoBcm6qtT	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
540923.207641	Ce88962FOY0BbMXqcg	192.168.1.122	51519	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fh61dm1q8yvQ6BktHl,FPKsb02BTeKyhai2ae	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
541254.653676	CkDDCJ1rdxCbnKo562	192.168.1.122	51521	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6qndp4QynJdRxXiMb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
541385.685075	CmgdwThY35IHpL7R1	192.168.1.122	51522	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F77gGW15UKYzST0hVb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
541521.004164	CsuMfA2Hy9geQQnRL1	192.168.1.122	51523	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdlBpv1xZ2BTQwm16d,FBMjZmwx1iAuvXD1j	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
541827.474620	COX6EJb2fcsgRovZb	192.168.1.122	51524	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpESER3XphzUnFqeUk,FWo7E2AG49U7JTpv1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
542158.996161	CQoeSL39s3iQvq9j7d	192.168.1.122	51526	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZQV814BN4tSWVzDKe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
542305.107071	CUJg5I2RMTsEsdnrwk	192.168.1.122	51527	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FloGX2yquoletJTyf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
542457.430700	CrMSK32mT3YjI07z52	192.168.1.122	51528	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fs0qXIe6wjMdjltu,FywAJl3Axa1wWzuTe8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
543041.109738	CLJdcNQgBpWtPHqO2	192.168.1.122	51529	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOHJaF6YdYk4wAiX8,FynsVE23ZFLywtcH19	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
543341.899183	CCeM6PCqpqy8pPbO3	192.168.1.122	51531	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0ufjg3oJ8TGb6s5mi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
543499.975278	Cx87SK1B7A6dUvNqC8	192.168.1.122	51532	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgwqBL2ay05Ocnrnck	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
543668.304984	CX7mK84n3ypI3zSSE3	192.168.1.122	51533	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fm4TYz2Qfv9allky3e,FY3yGL2pGuvxcDvCGl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
543943.797622	CpEuPl31QsiNZeaJq3	192.168.1.122	51534	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7F4V92dhxnlGaorTb,FlHN3g1JQ5MtdzfPEh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
544253.602902	C6sY2P2jEVjlktnkMh	192.168.1.122	51536	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPPdOK2fI65Tq7HuRf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
544431.694457	CH7zWlKRJ9HHYiHl	192.168.1.122	51537	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FuXqSj1xfLMTK6rp2d	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
544593.010977	CoEu6M3flGwW6gaONf	192.168.1.122	51538	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHY4Q04aJZzk4gPL16,F1AK4f1G02veEy6Bfg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
544895.175213	CfgPZb4v6ZtAOUGVz4	192.168.1.122	51539	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FU1Jyc1KUhW5IYvYK1,FLMNZs3QMqt7YF88k5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
545156.962000	ClVAhx4hv8CUIuPRL8	192.168.1.122	51541	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FkGn1a2DBZkjbQ6N0g	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
545317.037555	CavMm34DzrFEtMDTDa	192.168.1.122	51542	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhUTQK2MRcyi7QNpd1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
545481.358087	CT4hYL38ijJ1gSDGUc	192.168.1.122	51543	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoFgkl2aS1d81sTCp7,Fki4hz1fEZHU77mWB3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
546105.045581	CbC33x4x9xtKWR2jwh	192.168.1.122	51544	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2CADd6zrK3uZR9qh,Fdkzsh3ASV4iAsrnke	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
546376.843161	CNPlni1mBlb2Thucqf	192.168.1.122	51546	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fjaz6V3DSdFBXJ7Pr5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
546548.908533	CqBHM43kXJ8tWV7P9g	192.168.1.122	51547	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fz2yvZ2xMnqF0mMMk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
546722.222343	CNbez72Ht7EKevPhi	192.168.1.122	51548	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhAVqE6ugFAKJ7Qif,FNrs9CuRQjwwTqCbe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
547331.899288	Cg8prq21eaR8U5sZDb	192.168.1.122	51549	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOQBcF46oGMYnj0Xp8,FkqWOLKuubj0e5Uyd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
547624.692837	C87Vws43nrdIBjDb38	192.168.1.122	51551	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcxVICOl219xEhlIl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
547786.779390	CxSosF2sdlD51pNXqj	192.168.1.122	51552	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fayhk52GAWagItuygd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
547957.097792	Clsgn5141v3XTVAfG4	192.168.1.122	51553	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfkFNbENoohXJtSU2,Fv8U7jLspkJADC87	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
548590.788867	CPBv8F47Mwu1y5oaWe	192.168.1.122	51554	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOLcbN1UPs9WnzT9Ch,FSuKtd1sJowptm2Dd4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
548896.609901	Ce8jKJ2WvgXwYyi3ig	192.168.1.122	51556	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTSm19WuyOObHwnce	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
549044.727185	CZVzH11jen7fhWGG9b	192.168.1.122	51557	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FuhC5X3Mz55aDVpOPh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
549204.050609	CeBoR234ZoABgEgBF6	192.168.1.122	51558	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7FZ5Roa9oX6D8pO9,FfY8vl4sbreOcCcIrg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
549837.732397	CQ24zU8j0H2e2XV61	192.168.1.122	51559	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fniyff4mBipb7NT199,Fn2TJq2XltEJp1eua6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
550167.204167	C5imZy4TCJVz1A0Bc	192.168.1.122	51561	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQtxIB2WlIL8pFk1c2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
550334.261822	C8v89T2sO27Q3gqiW7	192.168.1.122	51562	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fnw4d14MlSx2LKikOh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
550469.580467	Chk9Sm151WxOsqEXmd	192.168.1.122	51563	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOuWtT1NQWsbkuG1fe,FAYs9C4gNS2CP09Gef	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
551074.269659	CfP87y3BCoUuY1wHqe	192.168.1.122	51564	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtHCTP4YzuT81bRG5,FhTD922X0HnGYyUH67	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
551391.044780	CfFnZC2ZMCiEIR1lr1	192.168.1.122	51566	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrXDvKsNsRyTf7Qz9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
551541.096581	CMVqM3rih7PLRTOs7	192.168.1.122	51567	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F76Spg1hR6niXjR4E7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
551689.424044	ClIvCb4vm5Lyok3J13	192.168.1.122	51568	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fx38Fm2lN0hnS9N2x8,FqQAB63rNpe5MQmqXk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
552337.115074	CWYGjBemXto6mnvl8	192.168.1.122	51569	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwOw4m3KzmHZuQGGr2,FlFwXt3vvITkNkGpm9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
552595.594946	C30mh73AxuJCZHJ1Mh	192.168.1.122	51571	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FApQ8TSDlccT08Lf2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
552772.646928	C2Yg6U3uyCFQuAD1Rg	192.168.1.122	51572	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fgoxge26wbjFAS38fi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
552942.966278	C99fBA28kxoKj19bsl	192.168.1.122	51573	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHp5b1dhjXQkb9lTj,F1qxJE4yQ9Awhgd0d4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
553515.639948	C96qMP2m7mGSpTLWMd	192.168.1.122	51574	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FN8qhxT7fOtIwnSCg,F8o8qp2RXEPXHAtfRb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
553810.103318	CTF3IK3deGZWcBfuD8	192.168.1.122	51576	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fmj18g2pZEdttN7v27	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
553954.155688	Codjcn1MczfLDa5wkj	192.168.1.122	51577	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrrWvk3TFDrBoIuSGd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
554101.472070	CmiIHU3eVbsN22c83l	192.168.1.122	51578	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAzzMW3NDW70tXnGDb,FJhFE53VcR0g6u6Lmb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
554356.638745	CcY3Od4lrnPRGj6bCh	192.168.1.122	51579	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsPtfn1eZw3z4E2MEe,F9CS3c2AnvliBE2u85	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
554657.408756	CJSbYl3eBBvrEVsqZd	192.168.1.122	51581	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FyfqWz24TrJ6oOpKcc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
554824.156658	CDHjQx3OhK5Jm1iwTa	192.168.1.122	51582	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FFoY5433insz0rU3xh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
554950.473884	CgpQbOdnhDTqYKozi	192.168.1.122	51583	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlXwzu100CiIanDq92,FzsQwRmOVV66jsAGb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
555583.152432	CRwlbj4GQa2G86VVoc	192.168.1.122	51584	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbCDfB29CqyOFJ4Hi9,F9B5BY2AsG7Orqz8Pd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
555862.927304	COtspD1ZEQ83yXly2d	192.168.1.122	51586	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FjqEWvE1AVhbhZuge	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
556040.986410	CpJZTt4vKBExDW1oT8	192.168.1.122	51587	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBr5lw3OoKYmaDR4Q3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
556182.314161	CyljvS1XAaigYKtgYh	192.168.1.122	51588	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRX3sp42zNo0foSGxc,FWCWUR1X158I26X8Ij	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
556516.484883	CE6JBe2ON9exjyXyYc	192.168.1.122	51589	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fg9Eob1cjnnYaA05Qd,Fgxxkr2ohuBPCjBswd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
556798.272886	CUws6E1kKCoM1NsJKi	192.168.1.122	51591	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpHM7K1dST886ustse	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
556973.346552	CASdRF1Iu4aeIbb203	192.168.1.122	51592	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQTdid2hROeMNYsLK8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
557144.667414	CQctlS1GzU68nuP1h9	192.168.1.122	51593	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYS1kT1dq7lwbJjYah,FatkC84N3Cst069yl9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
557759.351413	CnDUfG2BgghW8bd2ol	192.168.1.122	51594	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0nrcH35Pq7id6RGc7,F3eOzBS97askIxUdk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
558056.149507	CXbjyf2cCKKigzAJh9	192.168.1.122	51596	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fczfz64huZGJK7oj9a	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
558214.241103	Cdopcq4mlU4b5zy7Rg	192.168.1.122	51597	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FY9NF24FbLAeJ0LpR5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
558351.572668	Cp7cRt4XpJfgidFG14	192.168.1.122	51598	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTfqFu10CNBSnonkt3,FVVoIC4yYfbBZAyoLh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
558947.249666	CzpuZyD17gAy4Q78e	192.168.1.122	51599	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F57yJz1mHyxCRp1Luk,Fr5FF1XZmiL73pSo5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
559234.035370	CT2hLI2LAocdPnzjHf	192.168.1.122	51601	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNVgu84lI2ZNtTDG79	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
559365.095513	CYBWan32ubou0qH2Sh	192.168.1.122	51602	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fo1Vih3WsCcBFho6Eg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
559543.420312	CCHJyYmP8DPTBqDsd	192.168.1.122	51603	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fx8owKxhG5v4lpUd,F9NqEv4oQqyV0ZPIel	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
560186.100351	CKr4E83H6Sj67dp2sg	192.168.1.122	51604	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fwjh6F3Y5A4uZ17Nba,FWBAk633QyT0Up8qah	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
560471.571809	CAL7HxnlRJUgVrZl9	192.168.1.122	51606	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FH8nzddguhD5IMiX7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
560640.609546	CM2x8G2d2d90szJHk7	192.168.1.122	51607	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNtMp814bo47ZDXGfe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
560777.931205	CY3VSf3qBgQExHDo5	192.168.1.122	51608	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjMhh9f7qdy7Bm6Ca,FBdrZR1opo2bVdJjCb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
561359.607524	CViOmH33FtHb488G27	192.168.1.122	51609	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCrh3r1UVfd5QjAVyg,F3gha143KnObIGAuDl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
561651.407795	ClHkw3hxlzP97uoFd	192.168.1.122	51611	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F87lVykoNqefCcBq9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
561776.512807	CJMzI416dh5FXK9Afi	192.168.1.122	51612	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fh4koQWG8JdkcAtul	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
561925.831715	CbwyDV1mad1Jelt6d3	192.168.1.122	51613	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQa30e4HbFZuSsaj17,FukoSn1JPKaJq0Lizg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
562499.506759	CASDxj4f1epUl8ZqWg	192.168.1.122	51614	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwxDvM2BjOq8HpLwF4,FYqu004fiKJ3B3ZAq	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
562779.271807	CGfrRZ1gbw8EtJtRz8	192.168.1.122	51616	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJabKC29PEo8PjZEe4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
562940.305870	CRs1N73KdvSAGAiYk4	192.168.1.122	51617	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRkRhO31VCW6cQoFbg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
563062.626157	CK4Doi4aWQYQQhtFXa	192.168.1.122	51618	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYVlT1oMJIrB8Ev62,Fs3HTS1AjKhzqKN49l	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
563719.290221	CqbqTA40jof2f1c4e8	192.168.1.122	51619	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTZFaB1HG0IXraUNeb,F4ljwD4JHEOta8uCch	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
564013.085160	Cau9jxgEEilREMNEl	192.168.1.122	51621	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FECanN2DLM5MctWgk6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
564153.149648	CG2LSv34zeLIWLwNp1	192.168.1.122	51622	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fm8boA2YuewsJZ7gS1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
564332.472143	CFsG53tNfJ6BSUCmd	192.168.1.122	51623	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnPjAl2lAuBcPKKaPj,FVzkTD4f7MDjdRogwb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
564980.153204	CSGcNa4BIGRswYDQo8	192.168.1.122	51624	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1QN0ljBSXIdRbnYg,FYnLaw28WnoO0nxz32	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
565286.970211	CAs6IT2lwApMybkXyl	192.168.1.122	51626	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FiCIGq29PsCEOx3kie	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
565438.076858	CCUCyqhmOCYNXo7n	192.168.1.122	51627	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FR7UA14XMdWKRRaopj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
565612.392024	CGZwko3Y9Ya1QYQFUj	192.168.1.122	51628	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmOqRt44RNy3abSfb3,FJF70W1w5NEcy6ioIk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
566240.055726	Cb0puv2d3IjlHZwjhg	192.168.1.122	51629	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Faa90ZGPFIUPr7tD6,F1TPp63w2sy3xgmozb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
566506.847027	CQcQSK1eIOvDiK3jgj	192.168.1.122	51631	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FjqQkJ1SR0hoJ1NxR4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
566632.955960	Cy8hLSPu8qYxFiqFk	192.168.1.122	51632	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4lvB4BDyStDzeyx1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
566791.277306	C5JgJh36za0oIS9vUh	192.168.1.122	51633	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FToT512HH8tiDVYAcd,Fvukom23fmh21l7PQc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
567403.948134	CYY8N913B9rLSvyDga	192.168.1.122	51634	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fq5fKf1zy7n5SXS1ej,FEu7Hx40ESr173Zp6k	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
567692.736839	CtV1dZ3XKzQdkVGDH7	192.168.1.122	51636	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNHtyf3FH280k2dKuc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
567845.818965	Cj5hR64522N8HzGNM6	192.168.1.122	51637	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FoJL6W35UNSlq7Ayyh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
567989.139389	Ce5Bbn4T2zLKrL12K2	192.168.1.122	51638	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FL1Wvh2bu3eQTt9Urg,FsTI803lWYICafT4ua	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
568585.817632	C3jYwW3BIsfMAJmcG8	192.168.1.122	51639	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOJE2fhnV6lwCPqc9,FWDVtw4ifBUXDTQR7g	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
568856.602753	ChF5xi2H8TGu1cJt73	192.168.1.122	51641	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FePCF64MzCHzhknmfh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
569009.683225	Ck7GI04RFp4dtdp7Ua	192.168.1.122	51642	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdQzT71F5BjFwOjlDb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
569161.004300	C5fEgV34XZdkiNr7cj	192.168.1.122	51643	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FadLu22ffq7SLMTvWd,F25O7e1Dec6yxmgs31	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
569764.682832	Cfcmez3ZA1eAlwUFtk	192.168.1.122	51644	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAbobi1rSyVwm1xfck,FDZnhh3PflPWuOFgr7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
570090.471123	Ck9L3b4LIKFkXCPWs8	192.168.1.122	51646	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fdqh7e4Sq3vT3nGFnc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
570212.541991	C9elz91ZsurL6HYx86	192.168.1.122	51647	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRgOZy2HnO32G4jRMa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
570362.862207	CReKit4xtwIfSQ18Xl	192.168.1.122	51648	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F05Hht4IVrAcFHfsif,Fv0adV1r3JuC3MexHi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
570952.550172	ClUT0ZbmlVgqTOAxf	192.168.1.122	51649	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSSALh4UWU5uCrq0yd,FtTApi2ofTxGOzLZil	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
571276.319084	C1fz0jkZoHd0pRxuk	192.168.1.122	51651	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXhHd6g1wNxiNOW3k	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
571429.381423	CWrJzT1NJCpN3IOyk5	192.168.1.122	51652	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUrqxo2mojpuqFLEB4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
571556.698989	CtoxhGgYXAkxfEdB2	192.168.1.122	51653	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZdCVF23AA4eg0gVWk,FXoEwp100llYXuZ0i2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
572178.362828	CqixQKu9gddd4ro7c	192.168.1.122	51654	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4ZZMi3vhFQTUlUSwb,FJmL4b2FgYynDyxtk2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
572485.122491	CHHI5Q1ODnz1eyT1v	192.168.1.122	51656	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8T72d3ZgE8oDywBe1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
572663.155227	C2mNCs17XGekQvwt66	192.168.1.122	51657	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJQNI82lELu32DTFGe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
572807.477606	CjsuoG4iFSbPbVwFa2	192.168.1.122	51658	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJGm9f3Bin33QVlprl,FsJOEg2WkDoygP312l	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
573059.940315	CaF3eh29zXIE88Z5o5	192.168.1.122	51659	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fb38cxqxNPsoyg3tl,FmQrb6meiUWXuTbk6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
573366.740763	Cl1yreJ11JR2c3XIh	192.168.1.122	51661	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fken6h1BRo6F9sF7s	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
573515.820978	CjnqrW349BjsFzvVXk	192.168.1.122	51662	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FsOmrj3AqgN1mnu99f	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
573691.138360	CI2e9l2PX52Yx9Nw9a	192.168.1.122	51663	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMmNhDXVsRPdVys8k,Fy1Jjl1RNo7rLztdA1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
574332.800219	C8A9PB1ylpH3HzU6z6	192.168.1.122	51664	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuKtrq2XThGluXcZpc,FFlUGkK0Jf6H4lCTl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
574657.580195	CaLaHC2mQIkmKR3Rhf	192.168.1.122	51666	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FS3K6p1hmGaBawtqO8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
574797.673971	ChbJ253dMbQDJQ32vl	192.168.1.122	51667	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FzZBTE1omhyvsyoNi9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
574958.990328	CTCoxi2HFP4IS3qd7i	192.168.1.122	51668	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqInTm2MAWNcLqiZea,FnTsRC2XCK3oHbhszk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
575257.168945	CAWzdEayXEpm9ydqb	192.168.1.122	51669	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FX047w3kNaJqZDZlg,FHvriT2n1CNvOaifhc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
575567.967408	CFeKMX2qE9sAF3B9fi	192.168.1.122	51671	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fxf2MI22QVdusKA988	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
575723.054916	Cqz2LImvDhOHeMWll	192.168.1.122	51672	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fjft7B3RgYj6vCyPj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
575880.375147	CNDvXIRIDoNwP3CA8	192.168.1.122	51673	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4Gs0n4x769f9dPE55,F2EJZq43PM0urKPyf9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
576421.053411	CmYeTd1YBGfoLSqaV	192.168.1.122	51674	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsJdtL2V47x15EyD0h,FYYidt2rNDiuh2KfGj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
576727.824855	C6fm5P1Dn3w8uiEEre	192.168.1.122	51676	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcUARPzvRJhLiYfz5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
576880.889520	CGeSll35LVBGYte2S5	192.168.1.122	51677	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FA5kbF28fLB3gXypY5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
577050.207254	CtfyIJ2wdAqY7Ulcof	192.168.1.122	51678	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNHzSemhx6p7srMQa,FQuqTO2KvbDo6CHat	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
577691.869676	CtegntoH77B8pPve	192.168.1.122	51679	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F15aJr4i2ttEiRKdT1,FswMz84GUcf0VkO1j	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
577974.667020	CdEJYU2AWNA8Arnoxi	192.168.1.122	51681	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FD2T8PRL8hGszsmlk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
578149.753608	CcE2o32KwBibK7ltda	192.168.1.122	51682	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMbjnhDWP8la73ZG5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
578293.074065	CIHVXF4MG17wNfWEf5	192.168.1.122	51683	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Frd8MNJx7LVkvUFyk,FcfYzB1m1wGXAttfG2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
578909.740846	CXPf8IUhAxLPG1OK5	192.168.1.122	51684	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fm7lSC2Z7FiRraP9Tj,Fuj3Ye3KKvXVdgaym9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
579213.511855	CCsLKx3QFJuxDUcwx2	192.168.1.122	51686	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fx2yoH1BoOAPxw6h91	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
579360.575015	CqQ3u22xYELsaOEot7	192.168.1.122	51687	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1Tovr1KjLBckh3J78	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
579493.890659	CBVtOm27EDl6peK1je	192.168.1.122	51688	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvQEfq2lFcUZXHQFd,Fm5nU3oEb1Ar8jsT7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
579808.063741	CaogSk3ydxpOHk2aSf	192.168.1.122	51689	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLkJbD1Tdph9Enoo7h,FME9gS3Ev97WMesEB1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
580104.551408	C7N1Gj3EAiXQ5XWc7k	192.168.1.122	51691	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FoZZJE2ySIPG00HQT7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
580230.626009	C5Wpqr3CTt78PBFNwk	192.168.1.122	51692	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBJmKl1kNg56UdInL1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
580406.943525	Cu3wY42dGIrTXBXRP1	192.168.1.122	51693	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXQId72BVnuJDSE7Jd,Fdged1Tozi2PyXDtb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
581039.623624	CQ6dE01XZMhuAnLBUb	192.168.1.122	51694	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVWGjH3bSU8iHRuNm,FMIMov1NGOXQPmOKyc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
581377.122986	CofCVd3yMCltolCro1	192.168.1.122	51696	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fx1CbUEe23LIlibIe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
581540.218552	CPEorTVZDt6Ph2K56	192.168.1.122	51697	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlI0Ha4NeC7RNSgh7b	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
581709.536257	CqUmFe2NZsxaJSYS4	192.168.1.122	51698	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7NBXy1BM6kmRpshQd,F3LBq4jNSCCexHiSc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
582278.203990	CRTtAAxyNeKwRPe2a	192.168.1.122	51699	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fa5gTAqdpkyNjCRu8,FXEIzT3vPU46ZkKIxi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
582602.020125	C2W8th3k51jsCkAOUb	192.168.1.122	51701	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhEHBPzYk0XynJRJ1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
582778.128391	CGh6BC4wcvqJqiXLNk	192.168.1.122	51702	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2XHio1sKvSqTHNnDg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
582913.447289	C6RVmk1QbMo9VAqyS3	192.168.1.122	51703	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8CK6gnllhLBz0Vsc,FYjEb6oCtXzFHQHae	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
583545.126111	CiNXCo4kUGpF5QRhlk	192.168.1.122	51704	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2K5v53PCiKOibH4oj,FSEo4d1uISyqDThgZj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
583853.914718	CyN9rD4pqfMfDmZlAb	192.168.1.122	51706	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3r9FNPfwlIhBTTI4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
584008.988079	CdUi3E4Urd88wVTYe6	192.168.1.122	51707	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FnCs4I3T2NzZCdTcRh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
584143.306048	CR7DdCH7PXSIkAf5	192.168.1.122	51708	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpsGdF1WaR0hJPDWvi,FkxFIq4P8lVCR6kWei	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
584696.971740	CSLM5w29ZcYRtooK14	192.168.1.122	51709	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtrUVN3YXtGSW0YYck,FCTmjY1FOvl1aOL5d	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
585024.437128	CZ9mOQ1rz12NE6uD3h	192.168.1.122	51711	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fv1rle2ayO8Ohu6cy5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
585152.492741	CIOA9q24QuU1okOrP1	192.168.1.122	51712	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fg8QRJ3iQKS3PSINm4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
585306.808254	CMRa503iVSTm1AhDV9	192.168.1.122	51713	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2K4GK1Q8yCV5skyF5,Fc6kbE13EJ1wxb8jUd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
585866.483076	Cd3DEu2bRb6mchDmqb	192.168.1.122	51714	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fx4qKE2HbzTOB6Jma2,F8wFw04UXjxmk6uCvd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
586175.990141	CDoae521xINZWknuLk	192.168.1.122	51716	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FsojK94D4A527WWBGb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
586352.087244	CY59uSnUDfxkIkkwe	192.168.1.122	51717	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FuU3zXKAZii6cuJR3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
586509.407871	Ci42MA34Lmz6o8VPmg	192.168.1.122	51718	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fu9MyN1OBwQDnEsPai,Fn1esB12Eb7JtDq01g	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
587123.089936	CK92DC4ZCQZIivTmcl	192.168.1.122	51719	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsZjEF4QeRUMfKd6ck,FUnBZB1he4KN30jtKg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
587424.868867	Cq5iNm3sYEPZK7S0k3	192.168.1.122	51721	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTxkJ73QT4ua7AvZBa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
587601.924105	C8empA2MXtDR5t11g7	192.168.1.122	51722	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FD3N204901wZbnITp	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
587734.248441	CK3Edf1vAWeyLoJ7Tc	192.168.1.122	51723	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F966gc3Flc7S5xSSJ9,F4hhwt1tuygZOgjpNb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
588345.918041	CdG7H612pmFPVw3SW8	192.168.1.122	51724	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fd9Qsu288Nd69Bh3Q7,F0epM63rTahgWWa1yj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
588664.670385	CNBiYm2JoxF214MY6b	192.168.1.122	51726	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FuQm2nB13Il6geyE9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
588838.712490	Cd5qQa1rUGMoiDH5Ad	192.168.1.122	51727	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fcsch92zJFE35M8yT7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
588966.029580	CK4fvF36C2cXH6ShU2	192.168.1.122	51728	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1d9qQ3tyI2KaCFHIe,F5ofYs3ew0V97yJ26h	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
589236.508273	CmL0dK39Nlqcj8IJ4h	192.168.1.122	51729	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDfBuw30B3xPI3lTSk,F7sbnSIx0KQ8RmmXe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
589515.980230	CXtNySKvRnYEApIKd	192.168.1.122	51731	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FkCPJY3jDUt4VHCJGd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
589664.028423	CPQgev3hBg2isg1YRc	192.168.1.122	51732	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPxjdk20iwzccdKFE9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
589792.347302	CDnO2Y14VKFyGNNik4	192.168.1.122	51733	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fxlbhb2j7kNsE8v43e,FDvhqLwbuqsLZ5HLj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
590360.013745	CYtAXJ1F3Aq8P2QpNl	192.168.1.122	51734	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkPvSLo9bRFP2mEQc,FrrPHm0N4ZmGK5zOk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
590628.784499	CX5RB244ZZL9QLnXC9	192.168.1.122	51736	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FOnP5t1MJAFkTMQc2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
590791.850260	CQPtEQ1nyAJ81R6oU5	192.168.1.122	51737	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmD2P43l0z9ob7cpL1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
590947.168510	CBb8WE1MA3CtwBcMzf	192.168.1.122	51738	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLc1qJ2He2xGSVVPE4,F0k8JkUZHolvXX8Oi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
591570.844880	CLdM8B3fpaoYpNsot7	192.168.1.122	51739	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2CSVm425vHgqfAtNl,FuNWF73CGOmeQUP4u	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
591917.631319	CI4CMj37uPsCclvXId	192.168.1.122	51741	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdbZol4hLscQGuuQJ9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
592059.683071	C14kUY13FkBpJVGTc8	192.168.1.122	51742	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FTb2Cv4fTPM4zURqz7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
592215.001127	CWbZKj23p03Gc6Xjzg	192.168.1.122	51743	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmYldu2DNsvDSZHBpf,FF5XcO3d8fzZlui9h1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
592798.680004	C9Xmgq1YbXAUZQgGU9	192.168.1.122	51744	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FN4tm62oAvtcjKoj9,FLBjwT3U4JaEFDqyt1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
593112.466882	CsjrFi32NgY4vU1bhg	192.168.1.122	51746	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlvLlFVH8SbXVpxQ6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
593233.561002	CzF5ew3P47K7Isc3J3	192.168.1.122	51747	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FjQ7SD2CYOtN0ge5yc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
593398.883153	C24LAY1iUfbpAfFyt4	192.168.1.122	51748	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtSrCE3NGcNDFhQce8,FQc1u63XAm2F4Ha1u2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
594049.558740	CYWGTE1bCovsLc9Uja	192.168.1.122	51749	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FN0t8d2PTYIiEDo8x,FEGTJO2V06S3spY30c	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
594351.358127	CMfo8M2hf2ii7YHnhd	192.168.1.122	51751	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1YBJ629Y8j5Hu0fL	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
594483.437892	C0CzIh4urs3C1nRQD1	192.168.1.122	51752	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FEDs0K1PwrOAujcvOg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
594639.757059	C7Dhlg4T4fKt7gDo51	192.168.1.122	51753	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F97rr42yNl4qYIhUd5,FBPmzD4mXPmRyCm1H7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
595214.433398	CYC1w04nB22zydJid9	192.168.1.122	51754	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeTBkd4f0JXx3O6AOb,FZUlwb1JQytdi2qWk6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
595515.218664	Ch3HRp4guYo6gH9iga	192.168.1.122	51756	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNmocM2hlPKn2Ut9d1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
595636.295657	C0svTz2BUSvnStAVtk	192.168.1.122	51757	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlKtA011DkVFD7zQqd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
595802.619558	CRrUZl1gzRho3Lbjn9	192.168.1.122	51758	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5T8JW1lBUkoWCsU17,Fb7suP7YkmioW2VX5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
596379.308720	C31Z8K2IIsd8mmCJ7c	192.168.1.122	51759	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZdZHh3wCOYclf1i5b,FmMegv3bXfOantfIJ1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
596640.109694	CS0r9F2cs8OymG6Off	192.168.1.122	51761	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhGFcL3sfkluGnCcQf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
596783.224534	CYd3XI3a3ENzdoQOG9	192.168.1.122	51762	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdAIdl4zm7iA1udTzh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
596961.545351	C0v7rSCOboz8PbsLl	192.168.1.122	51763	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRP3rqvhIju8CQ9pf,F0of4x3MOY90IlDB93	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
597535.220124	CcYWAJ3MohzcjZ5Or6	192.168.1.122	51764	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRVT6k3mAbWayWmqVf,FlPTnc19jQL3HVHB9j	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
597833.988320	CU1nOl2RRprYFVXr8l	192.168.1.122	51766	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUulkV2VH0gXifFtZ3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
597993.044093	CysMqz2RkrkqPnxeB4	192.168.1.122	51767	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXcyqv4Y5P3Hng41pi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
598159.457768	CmlJng2hLVGKJrMwn3	192.168.1.122	51768	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FF3asL3IdPr4W5QISf,FTV4a9fHuck9ei8z9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
598745.129872	Cf5wJ120117UsxGvnc	192.168.1.122	51769	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZajks16encxksUPd1,Fjr1oZKVVmYTOLnOl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
599029.898994	CcMuXK25mf4lHsEaa3	192.168.1.122	51771	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F9A4Vo4Gd63ooN7Zpl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
599195.943552	CAFiS644prf1Ou2GK	192.168.1.122	51772	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDO4YQaUQArvBbeP6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
599358.261203	Cmi7153O32nri75QTi	192.168.1.122	51773	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhT4nA1lvYtPHTLF85,Fe55Mb2NPTNTid5gf7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
599964.923325	C7rFppTtz5n7k27d	192.168.1.122	51774	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMCS0f4VF7XoQ7k825,FX4HIr2AdwG3T1c7Nj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
600278.677956	C3CcYb14rTq08zyBs3	192.168.1.122	51776	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJx3Qb46RFzkClLo8f	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
600436.737327	CnCya010iYzZ3RYjTe	192.168.1.122	51777	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FnZGOoHyrT9rZAYqh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
600610.060991	ConA4TLVeDyLSTHwe	192.168.1.122	51778	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fqa0L21eUSRMMXTVvc,Fgr8CB3DTV8YWIGLdl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
601213.729477	CLE92A1VgDIADSKJTl	192.168.1.122	51779	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXtiN13wofypvNQZX3,FmcgGf3SBJe75hDhQ5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
601457.513839	C5RoA3Wt6q6BkEee9	192.168.1.122	51781	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FePOJE165bNXLvxKqg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
601627.576118	CWIxDC368BVNUvqcq6	192.168.1.122	51782	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fv6Ev61XUD29Yb2cwe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
601764.911425	CM7kjzZeW3qjhWHT2	192.168.1.122	51783	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAvoOX2ygtBthp50s4,FxxiyKhDoI2BOx5w7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
602374.588117	CqqzEQ2YJYRL1SDval	192.168.1.122	51784	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrF9hi3tttuAH35Pq6,FDT6fj1JFXDyD7v3Jl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
602708.076125	Cv8uoldw0x1WFn0Ve	192.168.1.122	51786	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FxxHY33i9fM1jzXLT7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
602876.144651	ClghU03TFrcL10FFV2	192.168.1.122	51787	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0GWy031KUAqKd5u4f	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
603050.459551	CNqZoG27pSn2WcQG22	192.168.1.122	51788	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRalgD4KiHKNNF2NBa,FhY8wc1Fne2wRVfsV1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
603603.124404	C6uAA43aBNSAuowFbj	192.168.1.122	51789	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fk9jyZgdcxE1OC67j,FJxAoN33otGdc5dng	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
603929.628855	CrcaS63BKXZfKvrN7	192.168.1.122	51791	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fqc62E1g4oXALImU72	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
604052.726634	CBV1rq2JrlOIR11jG7	192.168.1.122	51792	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKd85f3bxtHMRcPZij	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
604230.045649	Ck0b8B4Z2S2hm43HM8	192.168.1.122	51793	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyneRa1w6mQVVp1AHd,Fgtrmi2FujNeZ22Ihk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
604828.716952	CLyGiU177PXSncbrXi	192.168.1.122	51794	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqGJnF454VjRCUjzmd,FrXA3AKGRVmhEKuE1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
605157.524340	CbcG3E1fMfUHofUUqa	192.168.1.122	51796	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fqc4P91gkp6PvZkIUk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
605326.618970	CEznIPjslrytldWql	192.168.1.122	51797	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FF1tQd4VmiDqHWA1zj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
605456.939450	CfgNgp3HqE5u60xZj	192.168.1.122	51798	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fpz9Rb1lUv6RFB83v7,FMkt794CKG9YfjmTp	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
605724.113680	CT5mDBpPmmJ8nKF43	192.168.1.122	51799	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgbhYy2YmPi7uy8Dr4,FtiCdg3FhnBqp0Adaa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
606026.878138	CVKKeN2H3OwV5lcNda	192.168.1.122	51801	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FsMHSl4eLneIK7HZk2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
606206.249644	CQ18qnthcIdijlzp1	192.168.1.122	51803	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FY73lM17IKHP7BhQW9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
606342.573035	C2Gj4MBoWOvN2ZXRd	192.168.1.122	51804	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIpcqV3N00O29xayne,FZGcDH35UkP927IpWi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
606955.264286	Cy1Pv33dGZE1QjWqb2	192.168.1.122	51805	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRN58pXdfBbnCYawa,FIVrrtOygObOOQypg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
607248.752786	CayXNC3VMTdLJl8B7d	192.168.1.122	51807	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZ4NgU17U0ewOHaUc8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
607428.841644	CoTDQzQ8KKxyNdsHc	192.168.1.122	51808	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FB4s4q3ssAl5qmfOx6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
607606.158513	CkjixF42aTPvNKUZzd	192.168.1.122	51809	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfAHeh3yh6qO3nrTC4,FiJRJ034Dv40jg0PIh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
608256.825770	C0JCHr3JNO28kTq6t2	192.168.1.122	51810	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2QiET1nhjbVJboQil,Fxx4bh1eC1Smf45LZ9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
608585.589831	CQ8j5wwz6p3lYKP33	192.168.1.122	51812	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKF6ra4OHY6yHRzLA5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
608756.659487	CQsmOr4mPhjoBnWy45	192.168.1.122	51813	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fa1NgI1JSakkTZJr1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
608898.978373	C9C0194W7PRXguyRd	192.168.1.122	51814	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiQjBr1JFbfMVpsKv3,FdXe591X6yVJoAyLUg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
609536.656220	CfIuNR2zY46rkZoW46	192.168.1.122	51815	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaLeSM2gBaQu8tWuDa,FSKgUJ1ji8NqfKK3nd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
609848.172201	CaI7TZdkcySMc4Xu9	192.168.1.122	51817	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1hbW52cPhZZ8kfm4h	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
610025.283914	CW7VhE49SkARCB27Q6	192.168.1.122	51818	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FoMgduUvaaOBPF6Se	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
610173.601436	CWjKEX2NhkEPJrcgDi	192.168.1.122	51819	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKIY4add6vUwqsPK1,FBr0Q1WX55v774704	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
610753.264116	CDv7O713OeYD7nyJwc	192.168.1.122	51820	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fdn4M6AFiMzODboGa,FVHijs1ffIev740v91	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
611039.060919	Cw25Um3viKZUZdPcW5	192.168.1.122	51822	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJGsxY3XpEfYLIpU8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
611161.137184	CnlQS3WU7wnwTeKij	192.168.1.122	51823	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fy1jRA3MS5exwogTl4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
611327.460181	CRfTz42N7j313DaqE9	192.168.1.122	51824	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRrGqu42YJMj8XTAZe,FFrSL13eMZByZha0y1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
611955.122658	C6nzYEGtgIExphtug	192.168.1.122	51825	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuHOXS2Jq2NVPXqCTc,FPU8v81WWsvPhZuGUe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
612231.621860	C9MOI3QKCNF20b07g	192.168.1.122	51827	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8ibg33hQara81ApQf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
612352.700472	CkCeSk3DvmKZxhsmb7	192.168.1.122	51828	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FD0WYf3lOXNeNZHSd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
612484.033011	CmEMVO2KBYaRYslpTb	192.168.1.122	51829	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJWpNF3yb8JGuTriVe,FTg5mI9rzY9EzMiF5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
612814.197673	Cxs0Ld3WZ2TbnxiUW4	192.168.1.122	51830	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsRuQZ3sQUOtZ1AQR3,FtQc1YZHwU3LXgGR8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
613123.013430	C5O6dy1MPaiCPq8gvf	192.168.1.122	51832	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6necF4dJtD9jlxIXk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
613267.135281	CyOt2Y1lTKGBoJl0t4	192.168.1.122	51833	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHO4Da2EVByAcfFVUf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
613395.652118	CgMXxeqG3TlsAPk3i	192.168.1.122	51834	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fh3HhD2qvpqrCNL3yd,FYo2PV1inPyxNT8Unc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
613969.318906	CaAh3h5KXDOCsAcw6	192.168.1.122	51835	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9rPoEocVtTHH5JIg,FwjWPl4Kh4pMvmFg0f	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
614276.830242	CYBH811OCtYdcvYf06	192.168.1.122	51837	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgCZld2asDLJ6pqEef	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
614397.940491	CkhHX51bZTdjkwnv51	192.168.1.122	51838	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0Ei3d37Rn6Xp4YBG9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
614535.262754	CaCS151BHH1Lqr5xH8	192.168.1.122	51839	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEHNJE34pRKcjH0L7c,FP72ZO3yI7C2WDtrJi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
614806.432455	CzkGRz46aQ4zedQigl	192.168.1.122	51840	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCpyCUOdD9OrcZ0ta,FFWfVztYXpDYz9VJa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
615116.220118	C3rtLS2FjhuJ1TwTld	192.168.1.122	51842	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FSDlEC4u3oxJ40EHf2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
615254.311695	C4nuvq4fe0iJjnIZkk	192.168.1.122	51843	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqeLZVetciFk6HRh4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
615398.634223	CWV4pr3mHLzOdoVez	192.168.1.122	51844	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9s4ty1xbiM9wk9ZGe,Ff1iGd1LAafzkxOSlj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
615998.315836	CoEXwa2jbZSES7vKbe	192.168.1.122	51845	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fy7PHA2ql9zGKSDjJ4,FE3h9T3MN8uCDWYOwb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
616317.818861	Ce92Lw3y89UMP0SeL4	192.168.1.122	51847	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWNpsD1xwoXbsozHsj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
616496.908389	CoLozX2L4QnVErqX09	192.168.1.122	51848	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZQyOx4cjaDWsVncce	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
616651.224735	C20qAv2EOWqNW8PvCa	192.168.1.122	51849	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSVUIK2NJSlRBISvMl,FhBaxI3Nh1D6ZGolqk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
617292.948622	Cm8Y1a2sTPLsnFVCA9	192.168.1.122	51850	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyButb1kzgFJ2A16p,FCc3Nm1lzfFZrD5Luh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
617873.943803	CGhTix3bHpJpst2KM4	192.168.1.122	51852	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0h2mE4wQULIogngHl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
618038.005183	CK9zuA2g9KybLIbwBe	192.168.1.122	51853	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIfjXOgPF2HJMma45	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
618204.327032	CAXCpy48lzjKJB2hk	192.168.1.122	51854	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fe4ayv1EV1ZHbkmA66,FuNIMW2NAbTrXWehxg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
618835.995919	Cz6fXi1WGqVlyCpkQg	192.168.1.122	51855	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6uHTSyouXhtjIXyh,FFABoR2bNeAwnbsre	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
619145.463827	CfBijmzUSqHw6XKre	192.168.1.122	51857	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrKrn84p1Gl7wEifdj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
619272.538845	CLLTH8421QHCpD51hi	192.168.1.122	51858	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FnrLjZKQYrkDgRJE6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
619430.019736	CgDutg16Ljd22DoxGk	192.168.1.122	51859	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fozx5138YkB6y6Bf7,FaGn9T3bcEkoSCOfma	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
619974.703425	CY0PPO2FAOsedg41y6	192.168.1.122	51860	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWpwHo3QqLMA5XI1pk,FuA4Ap42JgrytFW1C5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
620252.476276	CNf2A03CcvX2cW3rF6	192.168.1.122	51862	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcV4Cv3ovxYhb8l9Xl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
620418.546881	CI9R8G3TdosLZWoMAe	192.168.1.122	51863	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhWM3W1CkBSCEKR9yj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
620566.864118	CFOA2L3jfcQmufoOli	192.168.1.122	51864	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLgQgD2TJ65Ot9cdj7,FlsKv8377O935BP3V7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
621169.541161	Ch47r42l6UphyM6en2	192.168.1.122	51865	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3hMeS1tyK4AIrh45d,FJQonk1SMhhG1NPBzb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
621479.311273	CXB8r23SMnf692GGrf	192.168.1.122	51867	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQsw4o2fQsSog9nmt3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
621646.382191	CkGWiA4lDrI54V9q39	192.168.1.122	51868	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fkxn2yXN8Z6SRajm	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
621825.694390	C7PLep2gpR6l30CAuh	192.168.1.122	51869	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIthB83W2c6qfm6Rcl,Fzfkku2nyBOR2qMUHa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
622451.373853	CcFbhk1aojD9BkWKQ9	192.168.1.122	51870	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfS46R3AzFMINT9hH7,FitXSn2IjLoWii4lI1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
622780.155396	Ce0NcG1pfpkrId0iGe	192.168.1.122	51872	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXpwAH1TOfL4DNPD6i	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
622926.252570	Cdqnpq3ceCGDFEwpzi	192.168.1.122	51873	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgjjE21cVxxv7ms4Vg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
623095.571834	CbdX8n4AcQ0f06ruw4	192.168.1.122	51874	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fpo75EEfgscKCXan7,F1Mtsw2WsMEaDvbk5d	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
623660.262050	Ciu5xc4Q8QFANQrS6i	192.168.1.122	51875	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAvp4qZiBT3AwQ7U4,F7az1FnPWSgTjy0t8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
623954.006108	CCRqiG2pyrEjTqJH81	192.168.1.122	51877	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fu2ShS1JIH135PdvTi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
624105.037034	CKcPuu9xe9LGruEt	192.168.1.122	51878	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FVTAu93dOVwByEpefj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
624256.358953	CXvLin2U25v8VbLYPc	192.168.1.122	51879	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLD3Wu1rEARS2JhWqi,FZti7V2IctiI83b1M6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
624898.021553	C47WAW1FfGmavajlkj	192.168.1.122	51880	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIQxW91KhrB9TL2yE9,FOy1ig8AgJhsLeRqh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
625153.788763	Ck3K404Igk34xLKzm9	192.168.1.122	51882	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJwDifwNACvPcstWe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
625324.860812	CA4UuT3cekff2gwFSk	192.168.1.122	51883	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxgwXe1mPfHkl5Y3H7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
625483.182948	Ckv2iK3yAYikaRveEa	192.168.1.122	51884	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlocPj1aNKuNXgZTPe,FCjdKE49R3vx52NCsb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
626083.857209	C6mmsX1bhigdxBdNwl	192.168.1.122	51885	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6CEDh3yjT4K0xUU8i,FeuFSJm5hDKsyDxSe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
626391.625295	C3mRhh4Gn7c2l2xn38	192.168.1.122	51887	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRCv0QPnfjoEf4yva	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
626536.683216	Cu9ojU2RCHMRApAoR3	192.168.1.122	51888	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FoauW24qQDZri9ZJs1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
626676.007874	CqoBsL1AL1LveGjYlb	192.168.1.122	51889	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FC9lnK1KAx7zW0qgQ8,FLweY61Wq0vrANdKge	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
627217.677834	CbzHZI2VS1H19bWW92	192.168.1.122	51890	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTcpNGjwKFsAThjqk,FSJ9kd2bCSqvd8yLff	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
627513.429240	CVWby13xfvL4re63j8	192.168.1.122	51892	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FktO4Q2F7lHh0lHzA6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
627655.472214	CVysVU2q0iTMo6HwGk	192.168.1.122	51893	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FswHkq4o0elOqxCdQ1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
627784.792159	Cx6X0w2jpF1LMK7Shb	192.168.1.122	51894	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fd2J43UO3ZFC7JV19,FvQ9uQ3jZOYaPR9qHi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
628371.466646	CEGuvE35KmScozh6i2	192.168.1.122	51895	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FesYGo3hNth8m4Lwzj,FrOolX13pNMWhOx1K2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
628687.246750	CwiRh839nmjwJveByi	192.168.1.122	51897	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwTKTum1Kl4D6qoy6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
628819.355166	CAJE5d4TN9Tztixkwa	192.168.1.122	51898	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtjjtAUh8jmjHYac	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
628965.679854	CVPSR31DE58Ru7KmR8	192.168.1.122	51899	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAPy674s5lijXVVuLa,F9ZlyT3OlKfrK2ieq7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
629622.344338	C2Xrr12y7vpxB6jGKl	192.168.1.122	51900	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEYIui2hVN59pnwj94,FOUCoG3IXn4fIYeli4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
629918.121938	CisWjX1KWf8i64zJ05	192.168.1.122	51902	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FoBcE91n4smqbKDoE2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
630066.177990	ChRdLfysa4r6M2cV5	192.168.1.122	51903	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXQBsdk0JpMdRKck9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
630245.500329	C5Zl1y1p7JPS0Skbp6	192.168.1.122	51904	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBh8NF4G06DZXy23F3,FGdV4T1Wyi91LMv8sc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
630596.684939	CtOcmTc2ZZ5Z6K8Si	192.168.1.122	51905	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F42DdM23ohh8Coiei1,FKzEcfpa5kKHoauXj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
630863.458796	CTNjLA2Ef88Q2sROHl	192.168.1.122	51907	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fa6XnF34OnPvdHOinj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
631001.502964	CJHgml49r0ebJIVuF9	192.168.1.122	51908	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtSjFc3TCZLM4cebvh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
631125.845974	CeP25R1uTbL40XG6S1	192.168.1.122	51909	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhggTQ1yQMFUzOHHQk,FeGaZv147vGK1dGAFk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
631752.526916	CNaAFdSmZ6DMmHp6c	192.168.1.122	51910	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FksUO43ZR8HbmdWEX8,F2QNDd3AOVsgbHYAHh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
632048.322885	CZLq1B3VYuUL4HaNH3	192.168.1.122	51912	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQHDvOJvGY0WZHNQ1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
632224.401064	CJ2hEb30oRLinSN0Ha	192.168.1.122	51913	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWQpGi4VuB9rjbxhgk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
632380.749993	CC6x0u1fr7QvLeYrI	192.168.1.122	51914	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGaDS2rPeBtgXV6K8,FLzN7t1mkrsmGz6Ee3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
632964.419468	ClGb8qVIMvy45R7Dj	192.168.1.122	51915	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9qa2Q3nGt11U3BHbd,FIWksd4amm2ubWj6E9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
633281.188387	CU3tmoMvNCB7i3Cfa	192.168.1.122	51917	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbDbmA46OFNM1ufYo	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
633403.266060	Cuvst01Z0sRaitsct2	192.168.1.122	51918	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBGmLoUghPZTSgeK6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
633564.582043	CbtCP4HMQTTLMzPYi	192.168.1.122	51919	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ftj7BS2AexdDQKJtrf,FMpgOX2w9MZVC9lVdg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
634140.260166	Cm8udO2tWbqUhK5so	192.168.1.122	51920	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8Wfye3shH3PILugPk,FzkZ3m27nihCy92Tch	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
634437.723865	CbXonrZaAD5ne4vP6	192.168.1.122	51922	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAMlpp1pzfhNxMxlB3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
634598.765559	CpGwjQ31BAiJhGhFn2	192.168.1.122	51923	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdesIi1IxumekruGVg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
634746.080665	C2Fze74yXk14VbOA28	192.168.1.122	51924	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEQ7uz1dWevBUtPgI6,Fpaavt20TTAvELuDdc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
635338.753246	CmtYIQ1go8r5K3a3Ej	192.168.1.122	51925	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNPARb4GQDNBJutjYi,F0sCMm2aspU2KSZX27	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
635639.535941	C9xhOtmmbFJiJuuda	192.168.1.122	51927	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fc73e630fYfACXG6ec	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
635774.615270	CpP9Xk35j3bhmAtOHe	192.168.1.122	51928	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDQRzg0Bm66HzfNjd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
635902.984893	CMHZW31RGHjySp8eY4	192.168.1.122	51929	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5MfcN2BxsR4rQnhE1,FHJvQU2CrnNvDzhvsg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
636179.161133	Cw0DaQ3Z3xviLTZvB6	192.168.1.122	51930	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWfEGNrJUKdW5f4Qh,F4hHmU3Qla2Q5wNR2c	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
636508.930482	Cfof9e4Prq5yeRey41	192.168.1.122	51932	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FsyfK11mILdZyFBsg3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
636659.007123	CyOTnT1Hpek6t2aTzf	192.168.1.122	51933	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FAmXNw1ILQxNnMokR3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
636818.330707	CSFRYM1Rxd14DGbR0g	192.168.1.122	51934	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGwMkm43dm0iBSKn1e,FwKc91PGSxRnKyYhh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
637120.525411	CsU0vpHg1p7OUsgdi	192.168.1.122	51935	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3gY7l3sy4Yxb7Dled,FwFEcc2f5mQ8rUHYN9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
637449.318988	CxRb692rZU5WoL08Q7	192.168.1.122	51937	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJImdn4cssPBcwqSO7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
637600.400657	CUg5NV2g4oNMMgWc8k	192.168.1.122	51938	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FpE5SsSqMr9mM8P69	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
637737.722714	Caqd5G3pS3cAan2934	192.168.1.122	51939	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLHQIJ1QcRbiRfKhxg,FvPX2V25hSwG0C4C9j	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
638050.912802	ChgVF646GAypkpqOW4	192.168.1.122	51940	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvTljuwRvoQHE5zH2,FzlwBO3825oEI4tGa8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
638366.707846	ClXR593q8uU4dB8U81	192.168.1.122	51942	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fb1Ug72gnpCJR74e0b	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
638513.824139	CSQnAS19r7FXV8Vyj4	192.168.1.122	51943	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F05gXJ26aQzxZ3XUu2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
638662.141762	CDRqR53h7pDlNx1yw	192.168.1.122	51944	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmIN7R3o3EAqvTtgW8,Fx6yX22b4P5hvPCgfl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
639204.831699	CBW2yX3LiC82fCEQHa	192.168.1.122	51945	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FquE88KxlNRJtbSfb,FJ0v384HtvDo7JNwB2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
639490.316015	CpHy9pvGMPpXXZhvi	192.168.1.122	51947	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHXq951GdJiDUEgq19	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
639648.385559	CMtG38K1JcqW97Sb2	192.168.1.122	51948	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdjYFM3q6ksyWNlO54	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
639794.710129	CCGkgc2UwNsQpOk5Pc	192.168.1.122	51949	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDGPSZ11H0BeGy6bFf,FaWty84UvuY2SL34Y2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
640373.402043	CH42wsiNlxHYIiNzb	192.168.1.122	51950	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fvc0FO38OkjhdJqve8,FkEWwn3uSnOzt23kYe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
640701.202792	CHtmSY370KhndDoZ08	192.168.1.122	51952	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpVQNV3GX1jzDR2YG7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
640851.284956	CM2nxQ3nOxFIPjE5Ql	192.168.1.122	51953	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FbbP2u3t6bcpGJkF6k	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
641011.599986	CjpG2gFHCVJxaXhDg	192.168.1.122	51954	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FftSnG2AjKXz1JHiW1,FNxXmw3D0pC2NGHfk9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
641593.285775	CoPQA34tpwRty79oYh	192.168.1.122	51955	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8gFDc3YenYsbQXdR2,FshZwc1SoC8KrMY333	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
641865.066645	CNdLVm4ns30X04hGHh	192.168.1.122	51957	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMiW0o9SKTt05ktv8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
642014.146537	C1f1p93Tlmp52Ig5Wa	192.168.1.122	51958	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPUrOX14ag4T9jeiCk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
642176.465138	CebiE71dmXqqGkkGa1	192.168.1.122	51959	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzU5993osSxLrzb5zi,FCu6MY3auZLSsJ36ug	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
642834.149929	CbFP6H2YzjqhRRkHH1	192.168.1.122	51960	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLVj9u23IpzAz0x4i1,F4HQgbK6gbkoFmsN1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
643131.941158	Cm8gMb3UQCnsKVulyk	192.168.1.122	51962	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FjsdwI1M5e2xm6pP5f	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
643256.022270	C7QLAKly88BbhVZBd	192.168.1.122	51963	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4NCJt2i3sY4zjtIa9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
643383.339190	C7Vfuj4CmM7y3ddQ6h	192.168.1.122	51964	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8EBUBi2vV3KRI46e,FjMXeS3dM9vYdiRLc7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
644017.031027	CIzK7q2kviUkoTPrj1	192.168.1.122	51965	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZgxqJ2MKFlHYug5qc,FLQOzGNbfGx2l3yl1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
644311.835616	CO19pi4Mq0b7Eqlqzk	192.168.1.122	51967	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8bs5c10zECAiJI3zg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
644461.925547	CYyz3CuiwnJLXsMQ4	192.168.1.122	51968	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fulr6jri85glphsJ8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
644585.247346	Ck466n3EBGvPP82lca	192.168.1.122	51969	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXQD524tEwAqlSF6Mg,FAV57u2pThREVzfNb8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
645131.943893	C9tNF9D4usKBAyDxe	192.168.1.122	51970	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0TpkEpcjto4qCcbh,F7FNit483oTdZoSusl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
645466.727264	CdO80OOXp1Yofhea2	192.168.1.122	51972	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fw2WlBV1N2s0Mvh67	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
645639.809439	CciFUw4rBsPmI8KJu5	192.168.1.122	51973	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FzxJ9e2IZWzazzfHw4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
645772.133991	CcBOFu20xqoSmt6Tt6	192.168.1.122	51974	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlbfyZ1MfCoK0ViJl3,FKDPJ225lpvncRxqM8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
646350.836166	CXM87G3LzEUBpVBqpb	192.168.1.122	51975	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fag9Xn1IMDq7P2Cf1k,FRg4pH2QGfojUvyhJc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
646688.582676	CheiyB29JWaIPH4ZQ7	192.168.1.122	51977	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FkjVZk3Qm25PfwI8Qh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
646854.645735	CVTzQs12rBGdwfcuF4	192.168.1.122	51978	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGpBTI3nkupuf38yk6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
647016.963698	CQiUJi3kQA6LRQ5JZ7	192.168.1.122	51979	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjPw7j3cHIqxCWBDh,F3Zdhh2WflgsTZin1h	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
647369.150186	C5fZsd4TLBWszQG6Dh	192.168.1.122	51980	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6dF2spdhEI6Bnnnj,FwG8jY2BtcxY0kLNrf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
647660.934413	CPO7YLgTzOZiinc66	192.168.1.122	51982	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBXvjd2XWQahtTII64	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
647822.997962	CwzFYJ2LLZI8P7asS9	192.168.1.122	51983	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fqhx0UQDsv9PusyN1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
647954.321674	Cj6vh72gSINDMVpcAj	192.168.1.122	51984	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWyanl4Ub7BfT5Ato7,FVLqUi3OAfiNU444Oi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
648588.022632	CleS113JfOJX2O8fV7	192.168.1.122	51985	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXfwZm4IXYgHQOFzMc,F4gMJ81vrSH8RkDogj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
648877.780955	Cd5iT542TqacXhJJL8	192.168.1.122	51987	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVLaqw38ZlJYMPAuT6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
649009.874796	C8ybxK3GxjDnz44Bc4	192.168.1.122	51988	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fbchpe480F3VMHSxP9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
649166.194026	COFEOM3Lbq1U98XfS1	192.168.1.122	51989	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9wa3i3njMDBLe4bNe,FnRb6bL6wpW3rbrD9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
649790.892627	CLoo8195PRUgWXLLg	192.168.1.122	51990	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fa88qk4JOdcdZKMRI4,F0AaBT2dS2khZZrjq	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
650087.662994	CWM5oO1tmX8qsBcMN	192.168.1.122	51992	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcUo2a3z3KDtdGRB3c	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
650226.744788	CWquWS36D1XpGYwjyc	192.168.1.122	51993	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHc17h4CMfqvDnvzw7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
650367.060390	COPFaqz1d9Yisof6	192.168.1.122	51994	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeriZN3JCK10aoNnKb,FqN8A32jexh8W6eOed	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
651003.735923	CU99A22JwxNd9DxDm3	192.168.1.122	51995	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYQ8gWIXuqq3dmsqj,FnM62C1B5cJHWGnQwb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
651312.498520	CLysfB28JDa7qaw5s1	192.168.1.122	51997	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1jN0t1jLxxl79yFfk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
651485.564347	Ci4OfMqWrAE4hcKz5	192.168.1.122	51998	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FD0NPD3aYPNHD9mrTa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
651641.883446	CfHKoPgBDXsEs1xe7	192.168.1.122	51999	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FONWwM3kpg6LWgcf45,Fx8jvx4vf5Dw56WZM5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
652264.558786	CBrRYD28rYMFXg3Oqb	192.168.1.122	52000	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkNf0B3IUFaKqzJqLc,FJJspx1s4nQM8YJAL4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
652567.565546	CqZg9iHVd4nQvaru7	192.168.1.122	52002	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FfEGJebz5YUKmzQa9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
652730.183844	CwN9Rd4zrQa5fAoSb9	192.168.1.122	52003	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FEpDwcP5oNBiGFph2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
652866.504029	CAqhcpuHoz4Y35N6d	192.168.1.122	52004	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F49JzBr3EdNtLZO9h,FhdIhk3gVv4eVkb2Bc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
653489.189478	C0eork396t6xZBace6	192.168.1.122	52005	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNDUPD3ybYs413ye01,FslLP71tMdrmKacx2g	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
653801.982631	CuWyWM1aHctnVqeNOj	192.168.1.122	52007	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1jM5uScypqEjnAy5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
653977.056435	CkZw3y4yre5BywIIsg	192.168.1.122	52008	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQGPUg1qYN5aFiFkOg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
654130.371149	CMIObq2bPb3wolFZ11	192.168.1.122	52009	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fr8a1m7gG0FV4Tmka,Fsxd414FRPkCyCsyTh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
654741.059276	C7A8vA2Mq4k1XEwjy5	192.168.1.122	52010	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQ7YPqTAEvnx6aMR9,FjmYYR1gj2kwBJWsoc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
655049.524941	Crn2Fq3ADkvbHc5KEi	192.168.1.122	52012	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKjuOC2kaEydZVUjf9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
655227.595575	CdJIUg2u5lMI2Abib2	192.168.1.122	52013	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F12C4hEGx34yVgfO2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
655362.913274	CXTof72VfBFaOUsJzh	192.168.1.122	52014	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGNKkqoqdLwe8wVOf,FNWTti2qXkpTwEZ108	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
655966.611511	CHXzS019ZcbArK8EV3	192.168.1.122	52015	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2HdEt4Y68ukuDtBq8,FJvBWf3eJ9r3F55BZ7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
656275.383260	Cnvn282oZGjV94iwg6	192.168.1.122	52017	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FxR7Bg2ev6hCCCCDhi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
656399.560057	CMyhwgW0bcynw85h5	192.168.1.122	52018	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2voxd4W6zEvN4ZWQj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
656536.881782	CnnUzG1q0Jrw9ZOCm6	192.168.1.122	52019	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FL2i081s3s9jjMjEs,FfNA6K2lCV9rKbHns6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
657169.585100	CpaZ464JrehqYSfYE4	192.168.1.122	52020	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAq2XH1zSdDPY8kfm7,FKNXZB4ylpmrGI7EIg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
657511.395502	CL0kF51a7xqsukRXC5	192.168.1.122	52022	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmH5lt2AC11NUHSyOb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
657642.486940	CNSTCq4xJHg4DPtqI4	192.168.1.122	52023	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3cEhz2TQeXWMB3B44	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
657776.803954	Cq4J3CAiOA3oVtogi	192.168.1.122	52024	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FShloQ1IWNFIGa7O6k,FgRiGr2I4Bvwhm2h7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
658338.511655	CB6OrP3NBqmi21doe3	192.168.1.122	52025	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdOFjV2VvYIuJWQRLf,FInWjF4vrspzqBXdTd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
658597.997230	Cj6O3YgOwSP5In8Ma	192.168.1.122	52027	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCHjg43xaP9b7fFoMb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
658759.092431	CVH67a1HjPgNn3xpb3	192.168.1.122	52028	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHZMQeIYUY52SEXh7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
658888.412621	CZu6kBTuq04ZaO2Ak	192.168.1.122	52029	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBCXbI3Bnk96hesUTl,Fsf2eG2LEdDVYMDZlk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
659446.115672	CjvaNQ27EL1YvoLRN8	192.168.1.122	52030	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxK7601zzry8cxl6f5,FzNiQY3s5oK9Z4Y2Yi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
660071.103417	CnboHa2JuQy0JgV657	192.168.1.122	52032	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrKYQM2Wxo0vlPZXb3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
660242.175587	CHVja8339ejtMQzkMa	192.168.1.122	52033	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhArdi3FwWNwq0EFj4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
660406.493690	CZGQxMsGDuktMs24c	192.168.1.122	52034	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FK73PLwLxuwF1kr0a,FxAi1m2wZ52JxrERFe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
660706.666877	CD0tOp38yT5PBYYfpg	192.168.1.122	52035	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaCmt11j3hWrSQpN6b,FujIXy3x1wBpwwLjJ8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
661011.141598	CDwrdq3AubYsXgU2S4	192.168.1.122	52037	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrhxZ37T7PZa2w2Pl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
661186.201505	CuRqSY3n86luOjw962	192.168.1.122	52038	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FnRAyAKLDdpIyZVgd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
661314.520269	C17OVM3qiQxge7tuU4	192.168.1.122	52039	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fdd9QA2D01blCChkda,Fn6Fmt2GZzQUOUkZLf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
661905.209998	CNJHcT1kfllG50i1W7	192.168.1.122	52040	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTtolZrc8umyzvCn4,F8lHnQ3OePqqFz9pOh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
662225.026003	C6aJjFZyQWBQI0uxk	192.168.1.122	52042	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFRmJc3Ne4pMKpKCwg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
662371.136067	CNfP8X34Cpy6x6MdB9	192.168.1.122	52043	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FVAmEI2m6DmgfTZKmi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
662547.452719	CiQ5Ip1W8o8WBze0kl	192.168.1.122	52044	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoSP4JpXTsekqwPE4,F59PiM3vuHp0dUjWq3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
662858.630653	C9Mp9QkSXnuPXJlU6	192.168.1.122	52045	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fl7Fbh4X4sVzLEmaX1,FEuIUr1jAhHehlDgMe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
663199.416093	Cf9GYo1c5VSPrsqBW3	192.168.1.122	52047	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwoPve4w0hqZShnYPl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
663323.484446	Cke7dE1Xp2IvyKxmTi	192.168.1.122	52048	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIsds64G4yYq9AWDSg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
663478.802233	CU8EDA3ShYzXotEpQl	192.168.1.122	52049	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBKznd3rkMjze6jD8k,FGbdQP2WO1Irq57f8j	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
664065.476471	CVu5vk26b8dGle07Hh	192.168.1.122	52050	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIkrvl4B6RdpfQ3qtl,FNK2sI3pUxIu6c6opj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
664331.961292	C3XsMJ3lAwvfsazxCh	192.168.1.122	52052	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3YxaR2oykoTpGExK8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
664495.058943	CfLLEg4Nhfy9JOftt1	192.168.1.122	52053	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrPvr03PHQZB44Uf77	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
664665.398044	CYpSRr3LiwzQXEUhyd	192.168.1.122	52054	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fdok3D3EMXjDUTYVQc,FUrwZu1pBF45epp1K5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
664913.595132	CThBczY3P9Aob1wH4	192.168.1.122	52055	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FD8PsX5btjHJYEPc4,F2FsfD1ZKiJaEeoikk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
665181.381766	CCI8Vh1R3aHdAFOuCe	192.168.1.122	52057	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYJrqN2auVpmhdHJga	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
665347.474320	CvaITm2o80hZ5Z9oe7	192.168.1.122	52058	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYDCDT3qC9UOD4shw8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
665519.797202	COf8TVvbXSucPd8Q5	192.168.1.122	52059	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUU9L02ScqpICTySce,FBbdkA3vgTgjLPZ9j8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
666148.490918	CPavOF36TziFuR3rx4	192.168.1.122	52060	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMSNQE1a0AVPHn6iBe,FJomrVmaE5aXhlaR8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
666457.285925	CZq8H11EqnB60v8NX3	192.168.1.122	52062	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwMvvF39AiS8LqWhDj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
666622.378182	CYAEyn48q2TiRDbQE5	192.168.1.122	52063	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxnVsI2KX4R4gdK627	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
666801.699834	CXGrD51cIiJlraGHde	192.168.1.122	52064	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6fbJiawFymofjsS7,FZ0YPu3m6p7BO3W5Ii	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
667421.390960	CzcNVO23vLOab2UaZb	192.168.1.122	52065	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F33CiM3TB3exa2TAM6,F6JHMH29rAKDmcrHr2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
667736.144978	CggJLp1Kh2xBs7BeC8	192.168.1.122	52067	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNEENw4E97hl1Ch6wj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
667880.195908	Cghxmv1JfLxjSxeSob	192.168.1.122	52068	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FsPWTX32cYYoW250K8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
668031.517993	CBl9kt1KUUPZhtLZh	192.168.1.122	52069	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9BXP84FRryYa6iXHl,FOEgboE87mysPnE6e	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
668669.215223	CdULBQ2Z5TDvKUs4H3	192.168.1.122	52070	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRbOvY1SKVmdNyCLhb,FfAHH84mXk3vsjdGj6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
668985.963624	CuDrRN1bgMBpuLzL46	192.168.1.122	52072	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FK2qOh19ud4FA9XuDk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
669148.990203	C2oVsx4N5JzBZifQ9e	192.168.1.122	52073	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfKaKb1Qr7ngcaIn02	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
669312.309640	CqjD1J3uA8uLZ7laz2	192.168.1.122	52074	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcCzme2mgC4o13Ve05,FPl46h1GIT20mReo24	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
669597.489381	Ci6HvY1aWu7NPLk8Fk	192.168.1.122	52075	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpWekjmLijVx4PILh,F5OZLM1OAcmMom3Ave	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
669884.267722	CrQ4y02BLIJ7CRx2e4	192.168.1.122	52077	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIUyeX3m57SZnPyQu5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
670025.670870	CZxTo5w02WckYn2Pi	192.168.1.122	52078	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FnZz1x1rVARMgyGLc8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
670190.992801	CeV6As3ayVVoD1jrIg	192.168.1.122	52079	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNJjj81uH7SQTkc849,FXEyEA1aWXinM0WN5f	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
670735.666115	CmnmRg4xePfsMWNF1j	192.168.1.122	52080	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEkEPL3A638qyTAu11,FQlrdG3YNMu5LFuUT8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
671059.454386	C8RaJWwGX7wtqoPif	192.168.1.122	52082	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FweBWN1hByetOwBXW9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
671198.548511	CbXVmWZtafCimt1y2	192.168.1.122	52083	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfHwH9hmQN7jIyQbh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
671342.878360	CpLyxT2ICUojKwZkn6	192.168.1.122	52084	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKuaNU3eQTKcwARvNj,FyFKxb2J2jGymmfKn7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
671899.569215	CZTY4p2xdCIvTBiQH2	192.168.1.122	52085	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuXkeo3Jqp6flvN8ub,FZTT8u2ttVQas3ydyl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
672188.348178	CjKezm4pz3kzMAKk31	192.168.1.122	52087	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FkPqNfgxQ2H6X2Whe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
672337.424918	CGN82c1bdXTxEa3vT5	192.168.1.122	52088	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FuPwmp1W76d9dD2fK6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
672459.744688	C95TAU3h0Wf6fh75Id	192.168.1.122	52089	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZpLcbWEP7Hq42mCa,Fdcors4AdVMspVAcR3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
673065.435821	CckPck1yW5LDYXc6yg	192.168.1.122	52090	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7tOy74b595R6HcpGd,Fd591v3Py0j8hIaoS4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
673718.407050	C4aaIo1XGsC1UtC4df	192.168.1.122	52092	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FkPVdG27OaJzsa3bji	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
673878.482240	CmjcFD4zpRsaLfe5af	192.168.1.122	52093	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FCfjxTbE6pfsdCBE3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
674025.795675	CuZxeD1n1TAYVUdJ6d	192.168.1.122	52094	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fyl0Wh3zD08OzlTLi9,FWLQOg16h6xN2BrqAg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
674637.475445	CQm8ZbyWhOdRL9qJ9	192.168.1.122	52095	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAYJ0b1wCQPv7Ub0Yl,F7b6yH28AdKVl7cIB5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
674933.232329	CwCvH832E1M0V49rw7	192.168.1.122	52097	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCtD57594iQL3Shxf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
675110.301439	CeviIo4evpqM44NwVk	192.168.1.122	52098	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FawPcNQgFOAmDAOta	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
675244.618761	CsUlY121VuYcpsO4m	192.168.1.122	52099	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsaNP12K6lPahEAqUl,FOx2Q73FUdJR6HGCUe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
675814.297793	CxcNbd3RROmQYql0x1	192.168.1.122	52100	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGBcUA2yT5TaOlN082,FWmh9i4fm2tFzNy0Da	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
676129.086762	CPF8La1Jqo8hBzLMZ6	192.168.1.122	52102	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4qWVt4ymIzCFU3EMh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
676303.166417	CwtUCW1c421DsStaa8	192.168.1.122	52103	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHIeim2eOG7bEfQswg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
676470.482035	CeQS9m4T2k9ARVkfNd	192.168.1.122	52104	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fzbz2pqKRruI0ZrVd,FFlu5935Nz02XzKgQg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
676711.657861	CkCbc9k5iUIWlm0kb	192.168.1.122	52105	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fks8im3xd4vAjPDz22,FDZCoD3vVe3kt1pUtf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
676996.417980	CKP5pZ7Io7F2Z3IQj	192.168.1.122	52107	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDCgnBvoPKG7Ap2i6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
677169.471858	CcFttb2y1IBmVy7u71	192.168.1.122	52108	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcmUxW3lGaawo0gHj5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
677348.794237	CyVbni3BRyb7Lptk67	192.168.1.122	52109	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpOv8B2VoBH9HjGt3g,FsCnua1eqAJ1SVCJd8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
677890.483784	CA1FFvqwV9Qu0D2u3	192.168.1.122	52110	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCFqq82W18xWYfnqV,File0k4dO28K6mYE87	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
678217.950257	CM4geC33Dn5Y5lR9l5	192.168.1.122	52112	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fo3oYT1wIlQb934kTk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
678389.015480	CBE0aA2QUUqvdvAYy6	192.168.1.122	52113	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FTs4dxHjkz5Ky3cfh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
678510.333869	CJUPo32e7iQF0I0lji	192.168.1.122	52114	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7HPG223wkamhAd99h,F4B3v5d3jfyI1Fyjf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
679107.022178	CKRMHz1hk9FznGa4G2	192.168.1.122	52115	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FG2k6y1d1v03rbDBX5,F7F0X62G8cbey4EOJ2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
679438.824613	COqK9d4RirNkVbrB43	192.168.1.122	52117	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmdKkj4TFt081RQeqe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
679583.934292	CsuMfJ2Wdn3IiNmAoa	192.168.1.122	52118	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwgTjI1qwg87a38mHk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
679737.248142	CbwgwR21IIb4Y44BCg	192.168.1.122	52119	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fs7mjM3xDTUaASLqAe,FxOiS729r8oEvWjoz9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
680283.924312	C7ZBZq2CcxQWpBK9al	192.168.1.122	52120	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FX4PplXAAYLaA9kDg,F84Imk4SoLjG0SJ5ya	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
680558.706402	CINrOq4RqrZTHixcK1	192.168.1.122	52122	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FuguKY2N3P1AQkexqj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
680710.803316	Cminn7LiCrVcI7sr5	192.168.1.122	52123	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgAFA62jLcYwFSCpa8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
680849.127202	CzZJrA4Wns6k1luq7	192.168.1.122	52124	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHccRm4ntZuQXwVZAd,F0pojA3AfpIZzVOA6g	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
681196.326182	ChlI1txABFsdtQKAd	192.168.1.122	52125	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrkyGr3Uxy0PEGG346,FeRlbu3RxxQx8WrS98	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
681482.107643	COzGTI3HoJpnzPXbc	192.168.1.122	52127	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fi0q1e3U0xyppaF12l	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
681640.209790	CUV1jVDFsbTiFg1ab	192.168.1.122	52128	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxfVMc3j1mmuqwunZ7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
681803.529058	CICR6z4E7DYEToQm8e	192.168.1.122	52129	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEBU6N1nYp9mumJSAf,F3ZKXi3ZnwHaIgkBOk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
682405.204326	C4b89k2V0YTAByASA5	192.168.1.122	52130	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoBiRz1MCGjigabuSh,FJI3mSQu6Az4vzYs4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
682741.016626	CcfkPH3Z3ftFntVQ47	192.168.1.122	52132	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FoEN8RhBY06NZcDMa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
682877.128646	Cdy7Sh308OmDpTLCXh	192.168.1.122	52133	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmgTGp29aNCEURg6ic	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
683011.446110	CDSBzs3dFvMwEXG3sj	192.168.1.122	52134	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaJU4G4KiKT7U2issk,FTGova3oyb6GduIJ93	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
683363.642860	C0AM9t4qd1x1X3UNHc	192.168.1.122	52135	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgySnv3bRqD1dSbvH1,FItyh73jOEQL6WmyN6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
684004.773363	CtPJYv1lFMoiNCnj	192.168.1.122	52139	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvdDU24Itn6qa9LSCb,FwOXhp2VFGewavMov2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
684432.549266	CytV0dFgWk0WKjMT	192.168.1.122	52140	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeLAsz2lTw1OA48Zgf,FXwNR537FLJkCdyHHk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
684747.338399	Ce6izKIE1XpMJ7Di9	192.168.1.122	52142	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FkMIRM21hFmjYOrwme	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
684873.408419	C1eQbG1aa8QqaAUSPg	192.168.1.122	52143	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F84wIq4tKwO3aQOVx5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
685017.730510	CAfSVO2zz0zQ6IXok3	192.168.1.122	52144	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhPB5Z2TWyH95DLJy3,FEJZaM29Hc22d0EHTa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
685596.431578	CcHdwq4g5Skp4i5h9c	192.168.1.122	52145	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAbntPEGq6mns5Qa7,F4ctr72snSPYoGKez9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
685864.233966	CQD54l340FoCHPuqR3	192.168.1.122	52147	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FP7JLD9PopHDIUF98	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
686023.332073	C6B0DU2BuLjpwWdZk8	192.168.1.122	52148	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJK8AS1WKCGdC7nQma	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
686182.655410	CIhyco33GvepKr3vna	192.168.1.122	52149	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLSiZa3XdzgijbRrd3,FFnBlJoefxQTpieDc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
686477.839604	CpfgKk22z8VWralvF4	192.168.1.122	52150	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZ2sPS33tzw0W3nd4k,FxEjAPzgtw2c3U277	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
686772.321450	Cs3NNt21m5ivNJirK8	192.168.1.122	52152	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fut57x2mLGF1amUXOg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
686919.420556	CAQgyQ3UZnmbmywkX4	192.168.1.122	52153	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Ff5Qih2n8yXWnvAl0b	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
687093.735301	CQhC2t2ipACMUviB2f	192.168.1.122	52154	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYVpiF2OdbganztsK5,FHb54ZVH1vRbF6nha	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
687657.424118	CUWOhs2NI7W2FVY2Tf	192.168.1.122	52155	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVUlrNJ0PmUQuLJ5h,FBQjl112K4RfEQZQh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
687928.200914	CJ0HjRQP9Yk8Xma8k	192.168.1.122	52157	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FM9GAi3x9PbYkGonXk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
688055.253424	COt1Rf460Z4VMwP4i6	192.168.1.122	52158	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9LobC2GVRZW4UWtlk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
688197.580118	Cq2pap2ASGXFvUlqu2	192.168.1.122	52159	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUQw9v32eg0xGaXuS5,FeWebG2nBHmrhPl1Cd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
688793.258841	CEUoKf1fa2HO08rTC6	192.168.1.122	52160	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuqWlc4xW4HEnyv1l4,FnlUna4K4WHKOafj32	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
689057.033122	Cnkus91UJ6vkouW5Y9	192.168.1.122	52162	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FipeuL2MaZ3iuCJwAb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
689204.095200	CuAkgt1FlX1oWRynZ6	192.168.1.122	52163	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNLGfqeMWMY7HY2yl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
689359.412629	CgQmBdVpQKbJiWPL1	192.168.1.122	52164	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiRv032cZNCi5jIlNh,F2QRPK25LDv1WAptQ	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
689927.099148	CEIxmr2YuATixSZtC5	192.168.1.122	52165	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVfKXRA4geSuggJjk,Fj8RXu1YjVi0Fy45f4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
690250.596228	C85QM91SfolF67cJ5	192.168.1.122	52167	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FSVIr547q9h2NLusd9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
690429.667338	C2Dk9u1uKRIRjcADke	192.168.1.122	52168	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSUNUl4GYHLEK6uDG3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
690556.984676	CN4daD4TfZGkmkhig	192.168.1.122	52169	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWYN0U37n5y1tGdTee,FLmRa53M2Hs8eLrDVd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
691182.664281	CozVTe3xy22ePfUTKl	192.168.1.122	52170	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYgcHM1XnrPl0UmYP,FbvKIP2F9aU4Bk9mg7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
691466.421921	CqNNWM2QkiLowkCRkk	192.168.1.122	52172	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FfeIrzValjrF5E5Kg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
691593.480636	C52HDAci8TNQDVNKd	192.168.1.122	52173	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fp2I7e3FfIc6czCdDj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
691720.006835	CzrUhYtIBJmvcAXZ8	192.168.1.122	52174	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHvliq2zqU52NH2eT3,FmV8Mf4j1vXH6z7Uy7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
692073.194780	CevB332Ba7lwPLLAGk	192.168.1.122	52175	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1am0O1EZZaJp5Dtm1,Fkvg7N14uekOA813Qi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
692396.991228	Cjj9pI3tmNAmABgVck	192.168.1.122	52177	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FuRVG91f0d2ZXDPwu5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
692531.058785	Clrcu52Yv6tCAGxgOf	192.168.1.122	52178	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrtFAO17If3A5cHgWb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
692657.374468	CjBTMz3ZdS3TPcGlTd	192.168.1.122	52179	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8Cw5h14Gtr0Mpyleg,FXIOu64M0VsYwO1Ck4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
692984.554432	CykR1u1fRxzySi9WX4	192.168.1.122	52180	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLtGZF4IqT3sB2KTAc,FhiGLNwEUVnXKyx1a	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
693286.316838	CVcVwd4yRToMbPgwO7	192.168.1.122	52182	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZVLWuUkgtfEJvPT6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
693445.382883	CQd6JJ2GFMulLA7ZJ1	192.168.1.122	52183	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMycj61bVyHpiaIW33	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
693577.708489	CQYgVy2wbd6oKS60Dj	192.168.1.122	52184	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFUInE3UP2n5aAXjYl,FxvlAi1DWRWKx6vYBd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
694134.408035	CB78tw1u1AwjrM8Smg	192.168.1.122	52185	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F07dDZ2RiX64Sraq54,FFXj4G4cozVTpJZCLc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
694414.850093	CKv7iTfgh6ixtLvFg	192.168.1.122	52187	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FEvMX21ZAi4W23QUY6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
694573.875567	CJABIq1PWjgCfcGeWd	192.168.1.122	52188	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhfTOb1MIZ3fSBXLt7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
694697.197189	Ce2t5M2SzfisPXuCpe	192.168.1.122	52189	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fv1fX518mJgQP0glq2,FaaVsC3xzpQygt8ACe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
694979.392909	CjMjAe1BwO4KudYh3f	192.168.1.122	52190	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQa5eA21JOS6hryON1,F0dz2E1vo6axXJhYf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
695267.180361	CZRFtbDnEFM8WN7h9	192.168.1.122	52192	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPO1mE3CIo5Nbf8xU8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
695400.263639	CHsbV3rpYZYtY1db9	192.168.1.122	52193	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fmr6nn4F42n1yNuXCl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
695541.581308	CnYiR64YNIUm073PL2	192.168.1.122	52194	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYi22a47zFHoNRyaua,FrgMtD2hndqCmLHPze	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
696196.272859	C9K5l72B2qmDIeiPw9	192.168.1.122	52195	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcKL2ivM9PfEfIhbj,F1WgKD3rFjQdS5s2u4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
696481.047317	CjKrhIzinxiMlwrjj	192.168.1.122	52197	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FsnOWo4kKIAQZido8f	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
696648.117772	CUE8xU3VPrSkTg3JVg	192.168.1.122	52198	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPFiW31eIJsYaC9wva	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
696780.442457	CyS6zu3lCY6GKEMIEl	192.168.1.122	52199	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FH5CXv2oEtg53wnY42,FtKrS06d6jvNSIDg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
697362.118866	CTiDSe4JZ22uFUXFoc	192.168.1.122	52200	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FREkNh3Oz0qsJQbJUa,F3NonUdz5T5oTaSQj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
697658.895983	CvtBDHXNJ673zTYc	192.168.1.122	52202	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fpg8Fj3njq7QZNwXwe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
697830.968821	ClVSgV15DMRANmiFP9	192.168.1.122	52203	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FCKXIlIZ971a88rVl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
697964.284532	C3SzAp2CplxzwbKLNf	192.168.1.122	52204	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPJAoX2BmKWwulikI9,FlEO2w3LCnIAAYp7Si	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
698306.456471	COgiIO1FBsOzGCxGr	192.168.1.122	52205	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F78ZAv2u0WidnjqxZe,FO3VkA1gp9nNF9wNu2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
698573.252324	CxVum32Jbskdnu5fB	192.168.1.122	52207	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYLlOn1MPl42NvSUM1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
698725.344450	Cm3adQ2Gq2h0Qtfiuf	192.168.1.122	52208	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FR1Xt14msfFZGNPije	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
698887.662206	CXjJBr41XaWGKWLwp1	192.168.1.122	52209	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FivhdDVCpbcC5Zmdj,Fh46Ck4tLw1txQQoz	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
699224.857524	CgzqhfJ1OFvDD2SQc	192.168.1.122	52210	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWQsGi3W5soE3qAY9k,Fo63Yg3lfqtlqvGZa4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
699536.614715	Cnso1N2mybBJwg8t7d	192.168.1.122	52212	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FaRP19U8zgq1XGQfl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
699708.678725	CvSMti1qobCVvOiCrh	192.168.1.122	52213	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4WAb41vmBLUrzlrcd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
699876.003492	CLHaFc4WvDvRb5Vg4j	192.168.1.122	52214	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3BTHf4FxXW7Q3aOg3,FylJix3AaRfAOhs8Z5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
700437.691229	CpMNzo2uxuGqgt8Va1	192.168.1.122	52215	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7LJDhFBc6JC8zhnk,FrHGl32zGQzEnJyZw8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
700689.178144	CgDKPC1Wrc2KNuG2J9	192.168.1.122	52217	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVJMnX3rOCY5jJRcm4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
700844.261002	CVZw3B1Yf1A9D389Vf	192.168.1.122	52218	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOsmAIDvYgFpTb3ab	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
700991.587133	CgmIZrkZOnGeilvU2	192.168.1.122	52219	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgFHZf3dHPyDY8vdEb,FAWfJL2LJSKDtc49P	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
701631.277125	CJYayE4CPebhhpU3f7	192.168.1.122	52220	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiMQUL2NQ3AbWkfY7j,FqT0244BPcScwwG6Rb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
701947.054099	CeXjoV2huXn6kocJwj	192.168.1.122	52222	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnJ2QV1dbTWovJdI9l	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
702073.178197	CxQD9Y3PHcXVSLUd9g	192.168.1.122	52223	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIvFWVsbxCQQWSW78	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
702198.502464	CoWPk2e6kRSBSB4g4	192.168.1.122	52224	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1kiNW3B61qay8lar,FTKhkq3i6jyP30HFnj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
702772.177514	Chscja2QmkYDMnJN7i	192.168.1.122	52225	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F11SLo3w8ps0pnnEl9,FDCAiS1ilhzeHnc44j	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
703052.967195	CMg62M1xHYAhqDAa74	192.168.1.122	52227	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNe9Fm2tfg3prKXV09	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
703231.043046	COoL5a36BrzPfg9C3l	192.168.1.122	52228	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2bpBi4uJWjYyRv36e	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
703368.414623	CsPYXx2jVaTtmqsTRd	192.168.1.122	52229	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FekGur21JOKq7oSw01,F9spfOdA0Xbb95sYb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
703666.593996	Cvy5S81AxTkYDh8cV1	192.168.1.122	52230	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fp96NF3x59AkbKDkT2,FYbQwg3i5kIPFr4KJi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
703959.389667	Cdjrwt42z91kTH77kh	192.168.1.122	52232	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXkfxw1GrY1LlRnrB7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
704094.464119	CM7ONo3YsuH3cHjcc2	192.168.1.122	52233	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLi6ht4Nex2xypEmee	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
704234.790066	CzIVn34CgOLwrSXdKa	192.168.1.122	52234	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPbw6X1gB9JZlw6Zk4,FqDXSZ2UdPkw8Lg331	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
704530.975955	CP85TI2qmZPD1HESS1	192.168.1.122	52235	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJmj8mSWyR0Xl1n16,FYlPzz4VlI91Odu7Kh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
704838.760256	CcqLNk4KXAEfFkJmu2	192.168.1.122	52237	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDU2qk29oPj7DJwbT	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
704977.854332	CKV0JC4DQSWbqbXDd5	192.168.1.122	52238	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4NSksFyr0C9fJuWg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
705107.174702	C5lrgu2unki5Tg8zyi	192.168.1.122	52239	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fc7WEn2U3Q6hrUrqQf,FbvbdC4AV8Nei56os7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
705687.860056	CWZXzI1INta2BEpx7g	192.168.1.122	52240	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFTwfsmlQBQjUxz07,FeNA1ZzNtXOxMveMg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
705960.643566	CJinha3UQj3k6haZN3	192.168.1.122	52242	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FSyyuC1B98zswImB07	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
706095.771389	ChMz8wLyHwrBts0I2	192.168.1.122	52243	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZFdvW2nswpjQ3RjL6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
706262.105096	C4oYkhpJrGbjXzVb	192.168.1.122	52244	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYEZ4w29pAbYcCgvhc,FJ61SC141zySo2oDAf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
706888.796616	CzIkyF2xtH0JJ5dzUl	192.168.1.122	52245	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLeCJjtJcABTegl82,FaBCL54nTMFpqoo8x4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
707162.567252	ChPWyU17TE1xpkykHd	192.168.1.122	52247	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FK9UlQ1LAdcA443up1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
707308.635080	CzW3Sp2nxKU15LMRO5	192.168.1.122	52248	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxGk1Y1Vh23rapgMJi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
707447.950391	CNGTrc4ciSniVjxlA1	192.168.1.122	52249	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FD3EWF2BsuvUffc2b9,Fy2r2xK14IQgwPXwe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
708040.642797	CeNOLV1tBZpZvJeid2	192.168.1.122	52250	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIJ5vs3d9LJqUTlT54,FgXK4MtZj3NoHGSOi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
708384.413089	CXJdv72gpSFmjYbcj1	192.168.1.122	52252	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhNszv20qZj2BCTzaj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
708553.485074	Cmo9MR2q0s6hHZHiQ6	192.168.1.122	52253	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FFbYMHjRrqs2B2zPj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
708724.815918	CJ3WZgvUuGLUtJ70e	192.168.1.122	52254	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5EQRo4gEa83tj7PRe,FrZFJv3kO3dtyC56Wa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
709331.498137	Curz5l1JDABeRk1dp7	192.168.1.122	52255	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRhhBA1j55mMURPYk8,FrxEKbKnhHeAJPxch	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
709657.964062	CC6kbVeW2U0xJYub1	192.168.1.122	52257	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FOM4K82SwEdfF4IJm2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
709793.037293	CKxfPV2OYn0IeDdH38	192.168.1.122	52258	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FO6nfO1XK3WwcdRW4g	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
709925.363354	C8EnOj3VmGgBhmUlA5	192.168.1.122	52259	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fz2i0Q2frSr5PDpS7,F6EJJW3UnqwQwlT9j8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
710572.062025	C0rsMNmBpNJ23UQK9	192.168.1.122	52260	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2iU2odHhRZmqpCGd,FT2JzE1Pqtr0xMj2k6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
710860.543829	CLomyj4Zgyt7nhXl79	192.168.1.122	52262	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcBhwkoKbDY9W9rHk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
711029.615242	C3RInM9Jr20FTvMB8	192.168.1.122	52263	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgoByYy2fS7ZomMV	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
711170.942990	CxuJof33L0kUHq3P5c	192.168.1.122	52264	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZauoB4YAAr5maisNa,Fs8nXe2blGEg8AURP3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
711771.626647	Cdliym153za3OM4t8h	192.168.1.122	52265	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQDTSejZGXGJpgZF4,FELiQa2oetZco2fpc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
712093.404353	CTsu784fDnTw6pltl8	192.168.1.122	52267	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQOWrV1fyC7dnucBua	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
712227.488873	CGFfNA2G1zs6bAjJ98	192.168.1.122	52268	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRnm1c4UsGjFGBE3wk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
712388.833987	CvoGDC4Hb84Hl8lQmi	192.168.1.122	52269	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrfnOI1JqkXt716pGb,FXnl6BxHpX3Nn8dk5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
713035.514021	CMXxIo4evmkMqs4b48	192.168.1.122	52270	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwQ5JwwplCAmCimL,FSR5VzyEHxOvGSH5g	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
713374.294721	CYaX5r4MIbB0yNMO9h	192.168.1.122	52272	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrPd89gYxxhw4q4w8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
713538.383160	C5vAkC2wgnJt9RCfqd	192.168.1.122	52273	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrycnSVb8LMt0WHyf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
713663.707221	CgM54C1YOPyVgKZcua	192.168.1.122	52274	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEJPKbFSCiutVtT5c,Fy6IIF4zxN1ued7lAi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
714323.385536	CzAd6M3ObgItyp5a54	192.168.1.122	52275	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6VVOr42yUp4GBzjhb,F9UTngFONqQKxS57i	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
714597.152560	CPsCrb2EOmWG7BICra	192.168.1.122	52277	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJ35cC3gd6aYCr7Yt3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
714725.248889	CuEhaD1aIW2oqy9iGh	192.168.1.122	52278	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6LSna1moHHW4TBzy6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
714876.571134	CbbYy231UpDBgxnJlf	192.168.1.122	52279	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsIDTc1g1ZhyoKH6Ce,FBcXZh2GfwgyMyMr65	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
715474.260271	CowuuG4TZuf5r3aPue	192.168.1.122	52280	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuYNDjLd96EubeI2e,FitSB03Pvk2pKVsOca	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
715786.031848	Cr1pw9UNfsIdwrswl	192.168.1.122	52282	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FuiIvP1PFp366rQ1Nh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
715942.118117	CnltBc2lRXCIXunKX1	192.168.1.122	52283	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3ozuA37qKM6T1kmxi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
716101.441685	C51qPAOr6hyYsDgt6	192.168.1.122	52284	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Favm5enSbjGdzI918,FofVkp1BXNHhE9k6G9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
716682.136655	CrFjJz2WUNLuJboLT4	192.168.1.122	52285	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzIRWh2LXaFD4oyPsl,F9g0wT1XbLXtERt1Jh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
717011.911224	CbpOBZ21uRB5yvMNw9	192.168.1.122	52287	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMcdn41rJcPHLEOcVa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
717182.021283	CSTeH3RzTpfxfOIlg	192.168.1.122	52288	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FaEtd235GEbJTcXmbl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
717307.345676	ChvJCR3aWSYdsQfVac	192.168.1.122	52289	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPZDji1fcAJA0rL3L6,FPQxvw3eTRBTfX32m3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
717955.037867	C6Q23E33oCSVdyIXD7	192.168.1.122	52290	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FawPa04qS3ebkpdLw2,Fm2eQ41M6ApW4xntGe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
718249.806225	CBF2Gp12vCnbSRdj8k	192.168.1.122	52292	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fz5Vbg1xKTXUsY99m4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
718410.858334	CpAY341ZVOlwQVcQz5	192.168.1.122	52293	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FiXZ9GWCfQykkMdb9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
718585.172937	CNF3di1HDdVebuK154	192.168.1.122	52294	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkMucsPLrC002AYUg,FukCfk1Hu38yq9Pc4l	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
719232.864948	CxGUAf1D3GJdGSUzLg	192.168.1.122	52295	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHRqzR1M1OjWvksni,FRfzXx2hf7vAHJ8Rvf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
719495.624967	CadVcm1mn2NTVRtv2j	192.168.1.122	52297	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FygJz83IN1jnGRMgjk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
719631.713141	CcxTPK2FEc59srGgf5	192.168.1.122	52298	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FctQLS1RnjA6SSX9y9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
719777.036660	COffbB2UMdHtS16fk	192.168.1.122	52299	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtIrR82pzxVt9OIDGd,FtJFeD4mFYwUMaTHHk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
720398.730570	C5OT0h2rceIZ7tmfWg	192.168.1.122	52300	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAXZor3Wd8D99D8xYc,FJVMgt47RBXEogAAt3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
720728.486594	CVvdmq2vpZY2LkdZbh	192.168.1.122	52302	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FC42h54suOPax4wfT	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
720864.595828	CRYuZvHkkVax8YVza	192.168.1.122	52303	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKwZbg1WTOhLbmazG2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
721023.919157	CoKoti1PfPDSUH8Dh2	192.168.1.122	52304	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FApCcRZw0MsOPqKZb,FbSFPM1ZtVcWivwLBb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
721608.600377	CZStuX1KkNPfKwUJd4	192.168.1.122	52305	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwrBDXDjMSWXVXL2i,F7J6y11oqR7NcmHIi9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
721912.406798	Czs4DXAiv3MYa9Mk5	192.168.1.122	52307	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWEl3C3e9NQzifQW9a	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
722036.551440	CwKG5739MMnMVr9Cdh	192.168.1.122	52308	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmX9el2keLASZYE6i	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
722156.868047	CNiz12446Zo0jMvCw3	192.168.1.122	52309	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3nn1040NvnZh5Frri,F5xw0Z3jzo5ITSihjd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
722788.556480	CqEUbR3RXQ8cgNktGe	192.168.1.122	52310	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ff8bnM3t3hGFfdGTck,FilPOq49h8UchGK3pi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
723058.014957	CvfcCn3Mt8zQurROsg	192.168.1.122	52312	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F9QSnu4z1rqjCz6qxc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
723221.083803	CjnO372hpXm4jjSJPg	192.168.1.122	52313	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FC4TPV3LB7MZbzq342	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
723387.418855	CyJpAq4bkFQV4p98he	192.168.1.122	52314	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FemqwP3fGdr3ffjD8l,FOSKvo13ppxg7AoQDb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
723638.608434	Cm1oEx3Hzn0C7Pr5p	192.168.1.122	52315	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9PwTzoxgu7dGYh71,FKAhzRq95idctMf94	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
723987.344154	Cx885g40hTt449zkfk	192.168.1.122	52317	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQOy0E3WWomZKb0i62	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
724128.408193	C3SgeI2580SyTOQnbi	192.168.1.122	52318	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJePwowUFRPJdKat8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
724283.726036	CYxOXx4WqnLz8fY3l7	192.168.1.122	52319	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F28UjK2ZLdbSf0aEt6,Fj4FM01KGPjPePcQ23	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
724542.908922	CvUwC8NzCfSfPhlrd	192.168.1.122	52320	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbZ9Wb40KdYgDZCHwa,FLYtIv21qSDoci31s5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
724830.697934	C07wSu1yvpyDwhwgu	192.168.1.122	52322	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FaV9mS8wPwulSNyVj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
725051.697064	CS8yUm1nBwyh2gEG06	192.168.1.122	52323	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FzrcXqbIzJF9qwKka	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
725203.016523	CIlCgE2zjzRE5tQPob	192.168.1.122	52324	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkqRuk4Uk8KG6lXG37,FwOFGn3VbQMO8Bx5ei	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
725510.189626	Czk4fv11qZp9Trddl1	192.168.1.122	52325	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4pE83BwgHZyxuZkl,FQCht116NGxUiWjlL3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
725822.846946	CrxYiJ14hgsUCc3KD6	192.168.1.122	52327	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fj9V7v48w8iQ5zoR15	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
725973.941755	CKS4IB308B5tL9pHla	192.168.1.122	52328	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F43U9SneqNofpzZs5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
726151.261349	CejZipp6dpRRzyJT1	192.168.1.122	52329	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUqUK8AxUPCI64zLg,FKrWs23vNebpfLTk71	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
726473.433425	CjPAhjQhQlU1Nt2eg	192.168.1.122	52330	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbxxwqimwvFpMI8cj,FkzFi04v6tZyGoFbYb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
726782.189803	CGvj7a2QsfSoRg0r3e	192.168.1.122	52332	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FO1mSr4ASL7n11r3U3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
726948.283072	Camfui4xcvtv4McVtb	192.168.1.122	52333	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5RGRFD2GK5kya7ij	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
727076.601436	ConnjC4bU3FBGM1i0a	192.168.1.122	52334	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPYbm62oXusyAET1X2,FDJuhPo5yPVaOOx3c	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
727717.302808	CXm2L52a21ODCnt9da	192.168.1.122	52335	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnjuiF7snKeHnjl6a,F2zL5X2lVB8su1gz85	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
727996.789177	C2dcBz40aKb03Pi7P6	192.168.1.122	52337	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2hCQD1rYQYmmTFcxf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
728130.883235	CHMf8H1hEtlF2XwAVa	192.168.1.122	52338	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FzRKdETeDDyc8YCh4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
728306.209393	C3cpCy4WfVD8lR8oL2	192.168.1.122	52339	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6AHM2yqP4OgodAmc,FeYy9c3lSS6tBU6dub	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
728946.900725	CLBJTduVMme0aIut5	192.168.1.122	52340	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFfaVd3yt7HoEdn4R8,Ffz1cliJcWW4IPdZh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
729236.678045	CXWy602kfhHwZgCk4g	192.168.1.122	52342	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGQKT1UWxZqR7HN9i	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
729357.777524	C3POsfFnFoKrIIaEj	192.168.1.122	52343	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fdqr4t4XkJrM2FgRD2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
729480.097289	CHd2p72hhr6JEEVAbf	192.168.1.122	52344	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fqov782LBUNQcW3j64,FwCPsD4KAkwmKI7nk8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
730093.769871	CdNbJV3ZKJm8stQml6	192.168.1.122	52345	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJlMjl1o268CAkjO16,F29lPn4Lv7Tl0cWmC	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
730372.557705	CqoJxzxROSGzfVyjj	192.168.1.122	52347	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhV3qV3d8pVyg64z9b	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
730529.662140	Ck6azY1TGgXvZbf425	192.168.1.122	52348	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FleGNo1jyMrwPyY1F3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
730681.985418	CLEQ8I3oJMnyMWCRK1	192.168.1.122	52349	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6n5672hikbPbNsA8e,FV7HDz25P05zxnd3We	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
731294.676378	CrTO2O1U46PNDq7F01	192.168.1.122	52350	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuLgU44tceQvbzKUxa,FIStjZokJReHwKOfi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
731611.168974	CW3xNAJEfWmDUQ4ee	192.168.1.122	52352	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqRYFH1DLQPnVwcCF5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
731733.273377	C0RbCB1eEjRwxmYSuj	192.168.1.122	52353	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fqfziy23kcetzEzuLb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
731906.596876	CSkXXt1pBCqFJb8EWa	192.168.1.122	52354	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fc2vXUzEGVwwLlu1i,FHkW5R22AVoPDek5Mf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
732162.083856	CnLjsU3ykUNlzl25wa	192.168.1.122	52355	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUgmPY1yUUd1Fy9gv2,F7hJxTYm0Q3qNvc88	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
732461.853490	C9cxS74qO3tFBOEo9h	192.168.1.122	52357	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCxMOk2iMtaEEeLnq3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
732600.950053	CgOrrcE98ZMjgPrza	192.168.1.122	52358	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fc60xjHhZJzkNoHB7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
732730.270516	CZ5D5vUeEZfcbvw57	192.168.1.122	52359	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2ZCMG3ZlG3pXFbnZc,FWsORS3gHH0HHDWuY7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
733341.950116	C2bYEj32WIthwt2h37	192.168.1.122	52360	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLPMC531my4pCYwQy5,FQBzMB12gsHBAsIqUf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
733655.732777	C9HCQH1VWHFD4X7DUk	192.168.1.122	52362	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIfHTIb8bQBQss8Ta	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
733793.845519	C6dklfQ73g25nuWnk	192.168.1.122	52363	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDsDso1QfVdeTFU245	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
733953.168804	C47bTNSkJnCviMlFe	192.168.1.122	52364	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5Xhl22oDWoLc0zPH4,FcTVu91w1RPv6CIc22	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
734193.344066	CFBLUZ2tv5UcVArvY7	192.168.1.122	52365	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fj7Ni02FY6PGRyreDc,F4gb6g2jvxdxBsLWCl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
734519.828714	ClB1Y33PaL299ZlEv8	192.168.1.122	52367	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAc4PJ2DexDizz6QJd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
734655.915277	C73Hn14pYV8K4Ijx56	192.168.1.122	52368	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZvL8ZyVBWlMLUNtk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
734831.231257	C3jXRI3jqo8KIK2odg	192.168.1.122	52369	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGpZoc20MPycYQY5s5,F3tMkE2MqFAGjwqMnl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
735410.914954	CXWizd1nWMOQHkLDLd	192.168.1.122	52370	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FetnkX1sDWztYJgmNl,FAZVVC2pPeW1FU5nNc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
735730.665319	C9cIOl4aSC8bC2X9Yi	192.168.1.122	52372	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FvtRx82Yb8DklG50O5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
735894.725896	C7rDnY3OFzo3M52vK2	192.168.1.122	52373	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2VfaP22d5PEdPmNu4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
736044.054900	C8B3mE14VsZtQQdq9d	192.168.1.122	52374	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoDh9m1SgUogrd2125,FJ8ewN2w1rHbDmypMi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
736605.732458	CyyVT21lRz8YXRQU9a	192.168.1.122	52375	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZzaNA3GKUcSi3DXui,FvOa1y4Cd5T4Zy8gtd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
736886.220491	Cc4ew81QCRGacksNsg	192.168.1.122	52377	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FSm1Tt4LIPzHHNWCS8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
737041.334201	C5iODl4YF3vD5ojQNk	192.168.1.122	52378	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FpkFMt2HplhcRgj4M	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
737194.648620	CWAbs61lsM1ikhAIWb	192.168.1.122	52379	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVVUghMh6Oe91euTe,Flj03012xIY3X9hHbk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
737453.821901	C8cm3KJaXh9qLwN7k	192.168.1.122	52380	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTAH1BHigeMYHhd7d,FTG1cj43tnibHAOtf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
737772.604440	CYZBl73Pqy6xU1Qzwa	192.168.1.122	52382	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVKTIi3Rasg12Uwji2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
737907.689517	CTt0jl4xswlkpb7IFj	192.168.1.122	52383	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKuKGr1JaXc8FtKzK6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
738054.014933	CIzwQE1EFXH146bVA3	192.168.1.122	52384	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLL7Me2lVTsoR3XNdb,FImA761uOeivHzIFf1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
738383.197986	CN83XTCVILlxe4H6h	192.168.1.122	52385	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBxfMi31s1fUxjcXV3,FFt0c43IK0TB2w7nn2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
738694.959186	Cyi4UU2BMco8GtQfkl	192.168.1.122	52387	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Ft5qv52mdAC0NFOMYf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
738871.005340	CHrRANi2wILrsAyeh	192.168.1.122	52388	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FnHKNz26wrDLVw0VCh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
739013.324242	CnY8Lu1vljMWcGTaoa	192.168.1.122	52389	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzCkCy3GLualoE8489,FSTfw7mTdNKgtfWJ8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
739280.808749	CqzLFM2HsInwtxi6S8	192.168.1.122	52390	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRz3Wl1qgO8rcVJMOk,FKvD7y2EUT4nkap7lb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
739580.567671	CFAXDv4IbI5sP7meY9	192.168.1.122	52392	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnsjfF4akMCBeu6RCj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
739739.644228	CXmKPe1Mb0BmtCYgqb	192.168.1.122	52393	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FVQxl92A4nx3HSZQul	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
739915.961880	Cp003l2vAmx6AsPtSe	192.168.1.122	52394	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0PnKO4cJVURQSt88,F6uLoy26fUEkmRvQ9d	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
740546.648785	C7XVNs1wMldM9g7ej	192.168.1.122	52395	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQX0f71Km6aOseffFd,Fc1fSD2mUYBDzTCoB	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
740847.422374	CAO6HneOR4hbW9gs8	192.168.1.122	52397	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlywKx29Gsq1BzCeMe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
741020.505852	CCAdEB2lFMiMRUzukd	192.168.1.122	52398	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fnqhhj3XxPOsdKUE9i	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
741198.826657	C0ktry38ghzTZ53BK1	192.168.1.122	52399	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6eNkd1QKyrJyDZXV8,F7jXbD22VxsyrNOZ5c	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
741785.509795	CmWYzb4D6I7iyz1ok9	192.168.1.122	52400	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6ADkS3UPKOcUscfSd,FzioJHcKSRHwkvVP5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
742043.286793	CnSo7O2xyQC7yI6yk4	192.168.1.122	52402	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJAnI42L8rUOt4OMfj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
742186.361777	CWn0Tl4y2JMbr9OmJ8	192.168.1.122	52403	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FL1ecF1tvNyQtlzWB2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
742341.679433	Ca9JNT2zOlAaAv9yC6	192.168.1.122	52404	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTL7X72ocB6YwIH4u4,FuWWdY1EomX7mLxtD5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
742906.371404	Ckcnav2YAXoGZtHKd7	192.168.1.122	52405	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVGZ4H1woHNquowqgl,FfaKPO2Mwds563mySk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
743201.147993	CIQxUj1MHDT4bfTojc	192.168.1.122	52407	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdK1QC3Q448OJ3Vqua	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
743379.246915	Cc35i93AEFdYDLP3o2	192.168.1.122	52408	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FyemWo4t6DCilfEQUh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
743548.565322	Cq7lIe1PlLRNuGlSi7	192.168.1.122	52409	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJ2t5P1hiySQ7SBikf,FDV6nB4m1PLbmbtWm7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
744205.258891	CpHXP02NP5UfoiICjc	192.168.1.122	52410	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRhjz54guiHaH7Bzc8,FU58ol26zGEk5YC2m5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
744526.713492	Cs1mrU1A1GsXMdIzv1	192.168.1.122	52412	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5ec3M24kLA1pqrAfa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
744664.795362	CYal7C3iq1sviObhr3	192.168.1.122	52413	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FypMUj3cVNBmITKSM2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
744825.129987	CgKOOiQiqllRf5RA	192.168.1.122	52414	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmiLmv47GVQ43Rw4G9,FIOlD71CDw0DYZfXib	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
745378.806389	CqycnQ3tdtPNz9cd7b	192.168.1.122	52415	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOWOH94IkVWIxgOmQl,F1VKaCnOFAJhwds8b	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
745713.590210	C9zUaf2JlNC7gjdhV	192.168.1.122	52417	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F94g2E2XClWCHzdCMc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
745837.703015	CwDwA24f2pItMCFaA7	192.168.1.122	52418	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5omoJ1Jd18CLb3Cf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
745968.023341	CaGWbw3Dt05nT1chL4	192.168.1.122	52419	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbkLYP1IciTS5Mo2E4,FUrOvPNI6oKpDmMf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
746523.702414	C2ncILVyuzYP9dn6d	192.168.1.122	52420	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8hHrcpjqO3Qaf8oi,FgHNAD41nTGZf10Zr1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
746839.471268	CPnMXy3h1Vf8WxUfui	192.168.1.122	52422	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXJ1fS36R8PtgL0Sj6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
746977.560636	CUC89F49kGwGg1Ktt3	192.168.1.122	52423	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQyf2A1yvxb4xlEDBk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
747156.802640	CYi8LL3g5fEK1RE5K9	192.168.1.122	52424	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fna3SD4YqPhyrRQyie,FICHrL3BsIQmT4w886	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
747463.984221	CCYHnQ3b8hO3uuVrZ9	192.168.1.122	52425	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNfCbd1ZZ2zoPaebP7,FdQKF3UMF8TJ6JL1g	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
747764.480542	C2fThd4RQEHtvtqxP	192.168.1.122	52427	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2AleXd5zo9icmfs1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
747926.594927	C22sYdiOjHlwRQ321	192.168.1.122	52428	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fa9koZ2mMVQISmbHqd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
748079.909806	CEgiOw4PSXc6lRT1Zj	192.168.1.122	52429	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRB7L038c5FqOHgyo6,Fe5jLE3rolyhJlGvie	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
748703.586442	CKBXXZ2v1ysIasXK46	192.168.1.122	52430	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYGtj93cxGpdLvmKh1,FipJ1n4Rd3RF9CnQlh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
749042.371464	CosPkboWIvOPxAadk	192.168.1.122	52432	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnrtaW2AzKc9zmZDuf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
749202.469920	Co6FdH1L1NcHzBU332	192.168.1.122	52433	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMhAhLFDzP6JGuuxl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
749342.785448	CR6K1Bl8yeQq75ybj	192.168.1.122	52434	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPm8C43LBIjCcEwAc,FAXCrn1PJDiOQx8gg1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
749891.483809	C3nIKa3vznuW4uoE01	192.168.1.122	52435	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQxZuz1m9TmWMfGpsa,FekWaO3Fs78tlEQ7qa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
750213.246931	C7IBKgZzJT6jU4emc	192.168.1.122	52437	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzoFji733f76pspQd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
750379.351477	CKNlcb1eRRe4IbvSaa	192.168.1.122	52438	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHsvob2uzwpI6Aq5T	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
750522.671890	C0cLm52xxTcWFFIPff	192.168.1.122	52439	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7tB451hdZ5JO0EbK2,FcB2zL34aBi6WigdXd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
751171.343834	CclZ1vpSmAUuo3psh	192.168.1.122	52440	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHIaRG1pkHvjscMn93,FOjhiH2DSJBg4oiO41	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
751464.132079	CSOFy81eMcS2k0i9xb	192.168.1.122	52442	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlUoQ5r7srOmRABV6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
751635.227473	CmADMw1nkJHZL0HZ68	192.168.1.122	52443	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FATRsP3WYVozr9VPze	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
751778.557741	CiyxcORU9M1r9QVz2	192.168.1.122	52444	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1CWev1OfkJZ57ohQa,FNOuv1UdMaX2KRJN5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
752434.240537	CYxPyARtAsx5OQVw2	192.168.1.122	52445	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fu0Zby1jzeI26K0jVi,FtYLS32qjlxrPHprla	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
752745.717661	CGwa5g2Zlpp8tADbGf	192.168.1.122	52447	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQHRaZ1dlsyqEY4ELi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
752902.819376	CnIkQF3W62xnphv6I4	192.168.1.122	52448	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMPEPz2n8GQVaZ8557	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
753034.142902	Ccb14HguIYKnPi4H3	192.168.1.122	52449	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeTxjS20opG7aOLJQb,FGe9hX3QTdTEyC7Rqj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
753644.841014	CBPd4g38kpPRtjiND9	192.168.1.122	52450	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnHQLv3MnH8VrU2f8g,FAwkJE2zHAqEBDpeua	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
753961.619134	C8j6wN3oFt2VD0WfT5	192.168.1.122	52452	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FjTdFZ28rx5Lyfj4e	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
754121.712246	COBZGT3Ix6zEKOAeSh	192.168.1.122	52453	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHQnPD1KkZ5GwpbA4c	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
754286.032794	CdGt9O3KWPhgvsVL8b	192.168.1.122	52454	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPltqB1QJsj36cOKV3,FqkRRa1ViB5lou5Bp8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
754844.716201	CYPayU5U6ZT1DeSpf	192.168.1.122	52455	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fqf2ud4x6L4HbOTbNk,FYZJRh1YJbwm1QWpPc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
755118.233768	CyaSJaBL2Xkk1M4G8	192.168.1.122	52457	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZooIg2eYci2Ti073a	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
755257.374938	CDAamYegxjlAMnVti	192.168.1.122	52458	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXlJK03mKhdTZigtsl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
755417.699810	CMoZ4v2PUmm8Wb5pV9	192.168.1.122	52459	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJmtXd2mPJeOjEsHwg,FG6QZ41m7uueb2PXze	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
756013.386812	CL0QX5168RFinepMI5	192.168.1.122	52460	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FURZiY1l0h2lcvNk5g,Fvi9PL3l7RMfqqi9J6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
756320.173922	C9hxRn258z5adcyWs8	192.168.1.122	52462	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3DLqG3dP9LG9dUwXf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
756485.280418	CJkpdYbYTjwKhPAtf	192.168.1.122	52463	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FsSQht1k106brh1kYi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
756611.606697	CjbqOb1OsluS9bziSj	192.168.1.122	52464	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4CwwgD0ffl1nhjlh,FnReLy21x6Le1r6iYg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
757177.299852	CmZAQDOR6eCbS9GL9	192.168.1.122	52465	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fut0nD2x8SCwaNNS3b,FbZqz13r4AQVpE9Sjb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
757473.795248	CXHGe13Pw1BLoGqun3	192.168.1.122	52467	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FErs6B1qaE2Oh72zT6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
757609.897816	CrjbMgO0MJhrdOLH	192.168.1.122	52468	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8dqQj3dFRI6krEorg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
757751.214843	C01gwr2GkgmrW8lYIl	192.168.1.122	52469	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGyiZwP5JfdPbaoug,F2Qkda1DMDnxJPlDN6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
758380.890324	CUKblUkmUOPXgUNEj	192.168.1.122	52470	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrcTegzr5fmKdmjq9,FrXS2411JGoS7JzcZ3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
758681.663320	CZRhKq1kpBTw63f3p8	192.168.1.122	52472	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPkLCDSKWKcjEONe7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
758823.763156	CZmY5iSlwGoT6ltI	192.168.1.122	52473	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FT62HGFXDSR4I1tdh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
758977.077343	CiQTku4yCLCzPUMNoc	192.168.1.122	52474	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLpG9y4rDTCUVp1O8e,FuqiUReqiBnj4NWK	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
759552.775115	CHZhUBS8jYc011Tt	192.168.1.122	52475	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FO1XpE4IucIgLq7wih,F0DJMf1HM4BmDTNV2c	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
759840.568836	CKo8ie39UtVGJBZeY7	192.168.1.122	52477	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZbwYe1omVlderDvRg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
759967.688169	C11upn4oUIN2ZXMVmb	192.168.1.122	52478	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FvzyV71rMeHdSYzS0g	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
760090.017339	CNv21z40hhTNM4HEPf	192.168.1.122	52479	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FltOr33akr3OwmDEze,FGnaPa4A2orXiikn58	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
760642.712852	Cxs1zv32OHBeV1rWyf	192.168.1.122	52480	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcPWkc2GRwKEpSDK1l,FUYvUbtkgz25pbFc6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
760939.507140	C5agnU1sA3UbMnRZRl	192.168.1.122	52482	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYiq5i2He4IxJtFOt6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
761111.602379	CtRoM333wAgWZwzGUk	192.168.1.122	52483	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcNvGn4ZMSFcppPOb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
761240.922277	Cyo11b4g0SLLgBUNal	192.168.1.122	52484	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBdBhE3gIdEKaf97M1,FHmB9z1GLtPYgFZ0n	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
761873.620119	CU364D2iFzi4bo1Zo3	192.168.1.122	52485	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FU9qafUqnpQ0Hjn8j,F0NRHR2kMCSCWiUJ8d	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
762207.381787	C5WOjW3Nfxkvp486Nf	192.168.1.122	52487	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYnDN74uqbVY8uBhYe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
762363.462219	CxPYAm4H2u9pM0n7i5	192.168.1.122	52488	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlDMmB30Ek8KDSFKWl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
762511.779557	C927f43KTFXL2FOMV6	192.168.1.122	52489	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDUTqu3DLEJFP23im4,FlXyMnUsg7wYhxJ7d	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
763158.469963	CbGa1s4lKdAjtLIFwa	192.168.1.122	52490	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F45riF4dMX3ls0O531,Fv72jp4qqMGxLIl8W4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
763461.243986	CJAkl1McoOHLwOjw7	192.168.1.122	52492	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5W5wd30dTUnvUWK1d	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
763592.339364	CQoAKgITJ5cmBnNy5	192.168.1.122	52493	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fc9khM1OPu7BWbwv0b	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
763717.663231	CYoK3k2D96OkrEZkd1	192.168.1.122	52494	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjQRX63yVZ0oIC99U8,F2VCjG1E4Fx0sYKcQg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
764336.352823	CVNudg1LGkfkTYxPLb	192.168.1.122	52495	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6rygwbiXcRlqDyWa,FRO1bsvgJVwr8Zfz1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
764621.105466	CQBKt63SVYCMZrA5Wj	192.168.1.122	52497	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLbzj31jQQ1yQsEOgl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
764754.179344	CPB22gUUF3xb1l8dk	192.168.1.122	52498	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FoFrtj1B6wD0ElIsw9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
764893.504005	CBRBAY1F06I7fcHeGd	192.168.1.122	52499	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmfzxBlPfpdQ0D76a,F128dm3hnuBn7Qt8Ud	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
765516.189101	CTT0fi4u9EX4176DNb	192.168.1.122	52500	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGLSlc3ntnFs8cq4u2,FIwIsf197tpAfyaal4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
765796.987875	CvOYkJ2QzWTTaQ6Ww5	192.168.1.122	52502	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FT25uh1PogZ2PauOm5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
765943.128686	ChoX0a4blhPEIzJFKk	192.168.1.122	52503	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fflxid1dgA7XYGrZf5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
766119.445804	C4uRfI3Y2nikR1wWR1	192.168.1.122	52504	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8bkwBab2A2MjlXe2,FW7FLj2S9FRPXHhXw8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
766441.639911	CmjFcH1MswtAmgdUSa	192.168.1.122	52505	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fe91Ik4cZi7H7LsCo,FvHKAw4dUR3LrngmLc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
766737.152330	CKc90W1PF21M3uk1bc	192.168.1.122	52507	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMlLnA3N47V7auvdp6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
766904.290565	CHELAi3amH2yGX36ib	192.168.1.122	52508	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMsWjh4rh9pJRxUI9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
767050.615598	CWxEvo1OozWYlcoKBb	192.168.1.122	52509	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhYQM21Hz0aZQjAK8e,FygjXr2lnXz7VF8Gi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
767646.312017	CGQeyiuUh8qJiJRJi	192.168.1.122	52510	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmJZjPiukzQb7fxed,FMl7jV2NZJgJf9gWD	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
767937.115146	CSTrJ23N5yYaDP6AW7	192.168.1.122	52512	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdokyJ3yuXE5NYLaDc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
768062.235563	CRqti73e4RMfIj0S97	192.168.1.122	52513	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FnSM3I2WRNfd5bZZQe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
768197.554304	CALbyi2zUOhyCw4prl	192.168.1.122	52514	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaIwOvfXIpmCimJv,FFEFXG3rmWiRWGtAG6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
768838.235725	CR2coD4BysXFI3Lm04	192.168.1.122	52515	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FICsRT3hzrYoDwOEmg,FOceQC42CSEc5VxTz5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
769176.734011	CFqjln427m3NvXlqs3	192.168.1.122	52517	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F252o8Juqag5Monbf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
769333.844082	CXJg0PlPTkfiDGdM8	192.168.1.122	52518	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGSedLBYxKZ7uCBje	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
769455.162533	Cc9v2I5oT5EyNVE62	192.168.1.122	52519	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLxE2B2qDylIvtDVPd,FYw1un2o8EiBtIFa6d	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
770040.844714	CSPS5Q3NOSdpqiUyHe	192.168.1.122	52520	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzjtXV3t6cTyAZvij1,FmSn9W1M6AsGbMSjq5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
770337.632746	CjEvSl3EIEDUuGfblb	192.168.1.122	52522	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FV0P1cG0IYpD964h4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
770466.752714	CcMnxF4nQabkjMGQj3	192.168.1.122	52523	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7N3h61bVqu9Pr9C43	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
770592.077623	C1E04Z2eFAvRKGG1A6	192.168.1.122	52524	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1c8Qt324FmE2ciJ62,F5WQGg43Cdrx5bam8c	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
770887.261615	CKD6Iz4xaHT36sVxX1	192.168.1.122	52525	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaBby72nmHzwKJSJP2,FzqjHayqXw1A1dw23	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
771179.016003	C7SeLd2wMJEDir9Fl3	192.168.1.122	52527	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8wcm12TdLSI3RR8j2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
771330.094089	CTHMLq31ZtXycMunWj	192.168.1.122	52528	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FygCdM2zYIExqD9El8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
771458.413042	CWEgEi2whltIBguiE	192.168.1.122	52529	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fk8uY54pFrz18VZOW3,FPsR9t4FnquUHXzbw4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
772014.111974	CtHLnH22CvO7f3fNZh	192.168.1.122	52530	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1uS1e21ZxX3y9Ujg2,FITRkn3bn7laeiKmrl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
772290.584223	CvF0EW2BznOuheDNZc	192.168.1.122	52532	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fr3m861jAUCuENAeY4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
772448.672231	CAlcvY14na38c4eXU8	192.168.1.122	52533	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Flux8B2BLdQSPqNBoe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
772614.995748	CxtK5CBRFx0PSX9Mh	192.168.1.122	52534	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcDpNg2T68beloo052,FrhLj82chavrAu6gc1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
773227.686726	Cn1Kyd1YvwDqVjiMDe	192.168.1.122	52535	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FksxGFgCFQ7oI9lza,FLfQRV07dIJWHIXfc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
773519.504559	CQUoZ9dCc2TNZDczj	192.168.1.122	52537	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWI3860MBnrahl3Zb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
773674.635030	C3TVWZ2txjLEBtYDNc	192.168.1.122	52538	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FbUUma2HmrFQyc14O5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
773828.951043	CFGyTN23TACG7NJ2vj	192.168.1.122	52539	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyUgzl3CO3jPdrRKAf,FzpYj44jSQZHjQBpT3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
774153.137171	CyEe0sx0sHCdJRiLa	192.168.1.122	52540	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwYl2L1YTzZSf9NY0e,FQxtKD1Qk4NyQlZSif	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
774460.883331	CZtYbRLIP0XwjyWEg	192.168.1.122	52542	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fygkxh2m5GOoFAlMn1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
774610.941839	CBEAiL2XW3ZaBNWUh	192.168.1.122	52543	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FodNjw1pHjnzluKuc9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
774781.260383	CX3OX625XA98tR6Nbk	192.168.1.122	52544	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCWFFQ13uHBqMgBspe,F21q9Q21b5l2ES99M9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
775354.955166	C6a4U04gegalR1nKyb	192.168.1.122	52545	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0nHpK2OaHUN3XWsLl,FZZVTk5Nu25vIGNqi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
775666.727437	CwoK542rgYjJU8RbSi	192.168.1.122	52547	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FyO7uK1xlCcAb6x15h	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
775789.836167	CNXhVcAV0pIrdPbZk	192.168.1.122	52548	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXyQGz9jq1JeP8GIg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
775960.155292	C635ES3PhFaH2F40Nc	192.168.1.122	52549	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXzLGF3DwNSEqShSqb,FUa2Dp4Wl8piOQn6Qc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
776222.342550	COuCvn1XSo5dqZFcg5	192.168.1.122	52550	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuTY7d3VSI2BmHFYn9,FNZLAB4p9fnJ7ZbBP4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
776482.118388	CLw5ouDRdzOqHxDWc	192.168.1.122	52552	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpEM7x4nMeQ4DkrpU1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
776657.213331	Cq0uOT3Vm2z44j4ATc	192.168.1.122	52553	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZwCFckZ0xwKulOlb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
776777.530552	CTS0SGJsw46RvnZ27	192.168.1.122	52554	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhSewB2LZa5ggU2fG9,FP3rSi2o12JvLvQx1c	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
777329.223953	Cr16jG3dy2pIIVg9Kd	192.168.1.122	52555	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FczknL2HXs4a3mecwd,F4FVhTPca6KFf715l	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
777623.979169	CwEDA92jsJE4cGGSsl	192.168.1.122	52557	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2h5l1kbYJNbchZt9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
777775.050445	CfkplJ1IBo07yHSmDj	192.168.1.122	52558	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPchIp3newtfs0Cuvc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
777929.377202	CKFjfS34G33AhWBETa	192.168.1.122	52559	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMfyKlAEhJMk6xmBc,FPw6si4sfqGZTgG9W7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
778562.046239	C5OQpv4SBFlPcawJ5	192.168.1.122	52560	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIRiDL3TIPjLAbJBS1,FGwP4q13FaqTMn3xxc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
778839.819627	CWlpoB2tb3NeGCGa59	192.168.1.122	52562	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBkAJq4O8UxfA3QLr2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
778980.996234	Czp1yb20UD1IKdRB3k	192.168.1.122	52563	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNqwwe1cE6FTBS0IE6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
779114.320474	CHxXke3r7DEnlq2p7a	192.168.1.122	52564	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fo5aWPKxiUvF66R91,FWqhdaR1Eui6HfxYk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
779728.993989	C0IX5c4aZBqrNVKXQ2	192.168.1.122	52565	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbVoisLxhii2ocf86,FFRcLp4QzwJippcYhh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
780023.460070	CP9Ss84IbkrvrCwSmf	192.168.1.122	52567	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbMsGO3bfdRtNyOh14	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
780153.530228	ChNDglJ1LdS5JjVOk	192.168.1.122	52568	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNbHaA2y8N85ECDh7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
780280.847741	CRBZjq4lKoqPQHZ1S8	192.168.1.122	52569	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaU4S21SIath3lacN,FLIJr925PAErrjxWth	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
780917.513349	ChDh6F1PvqBZspnjYe	192.168.1.122	52570	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FB0vhK2AibbDvBMzWi,FHlHJxz5yZBDxiuVj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
781193.332652	CGcL6ngwwxMtfnFMj	192.168.1.122	52572	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrxP192UtGW2jyTkah	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
781333.456751	CDXEW6tFjnDVrqcj	192.168.1.122	52573	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwJy963PEJPrfz9mYb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
781503.785973	ChMo6b1NqxyxJWAYW3	192.168.1.122	52574	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5kqaU28XTp9vAoPB5,Fg3BJw26nosh7TMjva	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
782150.476273	CeS0RD1HEyDeu2RpUa	192.168.1.122	52575	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVkDGp1tPqfWnHJUM7,FxTBGkrcXaCTyv6Oc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
782437.264511	C0yYm62ZhonMrFZLt2	192.168.1.122	52577	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqN2Ks2ghwb2AtUm78	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
782600.338340	CNJcyD4ayN9hYEKOjb	192.168.1.122	52578	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXQApXmwxvds889z	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
782758.670516	COb7gQ28Hf1b60KVka	192.168.1.122	52579	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNaCJP1kO1MyMpHOs4,FBJt6r1JGOY8GP3fT8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
783331.343869	Cpp0Gq3AJeVrUGcCRa	192.168.1.122	52580	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9pFG8BOBvFBF6ejk,FBjqSm3xGY3IDn32Tl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
783587.833287	CBWxns2mcIhhbNKbpd	192.168.1.122	52582	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHVNiwl1nHiEZkDXg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
783712.927942	C7ljlG3QfQZoUUgTBh	192.168.1.122	52583	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F92X1r4234HvGhwnm1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
783889.256445	CXeQNm3pN7QgPeQvu	192.168.1.122	52584	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5hYeBIoTaMbQuhE9,FJD92zg3Af1VrIOU3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
784216.435962	CbaPUxK2oc2dxHoVb	192.168.1.122	52585	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQ0mFt1rjk6LHi6Kv4,FimrP2299Z0wDj8vIg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
784517.187246	CFKsMUE35TJ55VAk7	192.168.1.122	52587	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FsRpxyNmxkW93rkJ1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
784649.253847	CTK0sk1lFEezSFYbAj	192.168.1.122	52588	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FN6cmKFsdd90JTDsd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
784776.581801	CmEfjFoiEw3JbgsZ2	192.168.1.122	52589	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FavzOkZ04Z8qsgYBi,Fcu93H1KyO7RqzWv63	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
785352.259032	CfxDak20sw6AUYI9O3	192.168.1.122	52590	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvOFXT2NVxmsvF3bV9,FhQJu72Yv6IMlD5zXg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
785664.730947	CN921l4QgzlqT29eeb	192.168.1.122	52592	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fg6bdC1OC32XGyW9Hl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
785816.792927	CMQctj11M7XCsCVkL1	192.168.1.122	52593	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGo16p4uCYtFQeXkc7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
785964.109110	CKHCiZ2pkDENzURbZd	192.168.1.122	52594	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMqJZL3UcZjgUYTfbh,Fsbszs1hx9ppdEfvt7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
786222.289899	Cxnj4f2or6mXm8XjF2	192.168.1.122	52595	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPS0166jWbMYZHB7j,FEBjma3zAyF6FJOoe5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
786485.064557	COaui92PXzMNRUifZ4	192.168.1.122	52597	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FV65xf25Bt2ZpO8FHk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
786637.142413	C9wg9q4IC676kAhsJd	192.168.1.122	52598	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1e12a4qJbrimD1ppa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
786767.473890	Csd8dbGfa4tiIxYhh	192.168.1.122	52599	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqUpJnAzhv73gPkd9,FSPhjN3igFVp7iVlxk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
787399.162059	C8Adrc31ci9hfgFZc5	192.168.1.122	52600	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcAQOh3CV0yFVeesYb,FPKwJMJrL6GGlkoc6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
787726.942755	CqhBXE2vIoHzVlSm38	192.168.1.122	52602	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBi3NMYhsGU9oxNl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
787866.049178	CzvfVo1Z5mU6YzmOL	192.168.1.122	52603	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxjmAA2b8nJqZ2Xb35	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
787986.366239	CptlYK2G5eEqKHjGG9	192.168.1.122	52604	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1qkW14pNqp0DyJUBk,FE347b2KxuNbWmQQc5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
788279.527774	CPxJA64pCRCvGCO5Uc	192.168.1.122	52605	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5O3wB3f0aSbjfi4k6,FXneR23fuEXsZAlW9g	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
788568.309421	Ct6HXu38l5n0URKwEh	192.168.1.122	52607	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlxpUo22kO6shBjqt4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
788716.361690	C6yygF1rnHLSxVH1cf	192.168.1.122	52608	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYl6Z91sxTaA7MChkk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
788880.691952	CJNmYD12UiS89UwB75	192.168.1.122	52609	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FETz8yeXx1RawRyVk,FDP1su2jLCJzaE5nmb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
789432.355654	CETUfv4vDlAoJGzeFa	192.168.1.122	52610	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUBHT84moYFdrKkGCi,FGo5NV3IjBjw6ncNAh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
789697.139155	C8FkGS1cZzIctRx893	192.168.1.122	52612	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTj21Ra1MHWaei6zd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
789820.238908	C9y7j53XvO93mkCdNk	192.168.1.122	52613	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPaPvs2pvqVGHTg674	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
789998.559545	Cw2pPC4M5GMWaYdpL6	192.168.1.122	52614	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvWpjI3VhyIdOhaIsd,F0NjIWTOeCTeV5N0d	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
790611.240242	CrlHME4jZZuU7eyg8c	192.168.1.122	52615	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXk3ia4ja4F6DEYNo6,FKpCuS1H1eD8qgojE2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
790908.006745	CE3jqK1TvxwFkJAT31	192.168.1.122	52617	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fkaa4s3qmMvymKQjx5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
791088.083384	CGXF3c1Av7oGsn1df8	192.168.1.122	52618	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBFf4A2K1YCOn66xO7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
791251.403926	Cbr6yv4Fx0gKUdRgT2	192.168.1.122	52619	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2MK3I1Lj2q5zrXW1,FZZzwa1SQhXg2xODkl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
791505.575778	CGoN8x22lok5XLGBBg	192.168.1.122	52620	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGgSwO3jxTdgMQZBRl,FQlovu4nEryySkqxs3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
791813.355372	CZQs2D2O2IBsZpXHRj	192.168.1.122	52622	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7Hc8t2UTyFRe55Wd2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
791944.442626	CKoZRyvKrvs1ImyTf	192.168.1.122	52623	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBEiAf4Zl9qpr1Mfn5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
792111.767969	C5TVrV1BcmEYfw3gf	192.168.1.122	52624	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1vNAj3J8hdLgJI8C5,FpOHNk1Q5ifDjZusV1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
792700.444639	CqO6nf1SrPOlbt3aR1	192.168.1.122	52625	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fobz6VjDDfyAxVRV9,FHgOWT12TMtxgIqHS1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
792994.194018	CwwbKK1Pu2g1oGDrI5	192.168.1.122	52627	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FvvgHVO41Q86RWEm2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
793138.238936	CC4bCXmketWBUy7Z	192.168.1.122	52628	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgtxFE136dlZgWHhI4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
793259.568231	CmrpbDwS24IyAj0Aj	192.168.1.122	52629	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlDBDM10vwEIGtZ0i9,F11AHU2cFDsxXBmQae	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
793809.248537	CM88YS141bV5DbCYGc	192.168.1.122	52630	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FefrHb1ZcurLIVLzoj,F7WXypDlI2Q6Yqw79	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
794079.027962	CyTOaB1JkALJetBdzi	192.168.1.122	52632	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FC7Qd2soAWa473Sua	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
794237.088989	CB90CL2KAqqIW8ezW7	192.168.1.122	52633	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPcgMF1Jd8Arwzntdb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
794370.405804	CWoHKC3bpNVZ89EHz6	192.168.1.122	52634	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrCA4a1LAWL6Ejhx82,FWAY7c3KKGt8xXqLfi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
794959.081575	CnUzrK1KhUOB8LlDG6	192.168.1.122	52635	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FG1lm3hHXx1Aht3Uc,FHxJwN3YWUjjehmf1k	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
795213.850567	C9pXYp2ytihIz2iUZj	192.168.1.122	52637	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFc2q43CvMPjD9SOC3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
795378.910912	CF3H7V3a3TXPemf4Gl	192.168.1.122	52638	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcdhY5b2AdKfC7Q91	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
795534.239012	CVNpKI3NNpC8QkHny1	192.168.1.122	52639	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FO8bxdIyOawxiBy9g,FlAUon2fPVp09sXM76	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
796141.902235	CZc9HM4ao25SfLVMi	192.168.1.122	52640	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPY9XqbAHFKdqNwJh,F4ByDu2ikBqMEXGKv2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
796433.694290	CIL7xr1Sz8ceshMez2	192.168.1.122	52642	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgnrIu4fHHbogzXunc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
796566.758972	ChjNORHw71lSaYUgk	192.168.1.122	52643	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FG0Obo3cKbs0mKhn15	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
796707.075303	CZjonf3Aj163clxYk6	192.168.1.122	52644	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4kOR92XP3c66vKP59,Fmi2tV1HcjrYm5V5a6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
797255.743627	CVrmM4PNRShcferce	192.168.1.122	52645	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FX8Bro1fvWG1SsLxJe,FDMtN14L5fhSJEnw9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
797597.513547	CHnZej1VsDXYT1BXma	192.168.1.122	52647	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYOg0w3DcmenW9dq04	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
797739.584904	CkCGWzheWQz2pmNe5	192.168.1.122	52648	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fk2dgr2Fk5BubZHRPf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
797879.900688	CloeCqgyIYySGPdY3	192.168.1.122	52649	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEvCtH2Z5lQTIZea0a,FogJi721Jo65yk6RHj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
798536.575428	CQrv3F3V02KjPlv5w6	192.168.1.122	52650	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fr7PWvucMLGSFeLJ1,Fx10Vj44HCfucb8DMa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
798813.065233	CLY7cy1qheIYzo4Zw2	192.168.1.122	52652	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXJBEopbPZvy47b1a	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
798981.159754	CTmyU932ep9TDSI3Td	192.168.1.122	52653	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGTkGXvwDQKGNRjAb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
799125.482043	C8eIxV2ErCfx0rOugk	192.168.1.122	52654	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCXRqH1jPYxfLpT0U7,FuQq6z112wuwpLTIV3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
799400.947951	CJppZc4uMzFntSHUab	192.168.1.122	52655	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fzndss4Ls0rKCURTU5,FpUhMuMG0kl8s3C6g	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
799730.432626	CgNV6O2lo44Du4U8Il	192.168.1.122	52657	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3k7j04tJ6LG5wDogf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
799867.504646	C5dHeG1Cl4oGax9oC3	192.168.1.122	52658	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPOJE028iZfuTpWQta	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
800017.824683	CUvNBz3x94npOn1cJ7	192.168.1.122	52659	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVBzzFupiBcBZnWZh,FQ7xxo26r3ukwJnFje	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
800359.997338	CsQr8b35q917LOdBx7	192.168.1.122	52660	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuSycv2DObOI0NGVP5,FKtbe21RHG3Eao1DX1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
800713.783802	Cl6NJK3YY2Q9nwl4J6	192.168.1.122	52662	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJ8knU3cyV4wzQbN2d	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
800885.868254	CaETVZ2qX0uJd31uH5	192.168.1.122	52663	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F42NY13xhtDR0sUfij	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
801029.189054	CQh4a84zGvkrKPkobf	192.168.1.122	52664	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fth9fy36DWPe7FNfd3,FgFrSj1TQB2nuc4fs3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
801657.853216	CJJXK02RERRToNxGN6	192.168.1.122	52665	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fmbjef1ldZLSCel5v6,Fa0eYYiDFR4LSVKZ5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
801924.642413	CaWGYo3ILTCoA6ssMb	192.168.1.122	52667	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqRHj51TVyosj1iLv8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
802059.736587	CoVaMOPKMp3YzNJh3	192.168.1.122	52668	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FFFYgX2EHpjpN5JeVg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
802211.058130	CRXh3cwAotOUKYvI	192.168.1.122	52669	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FboMSE4kHDVOr4Jnl2,FAyxUK3fuaXBot0Nc4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
802495.247000	C8KAkA25PhGPpcZfoh	192.168.1.122	52670	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1WdGC2spXlbr8iWB5,FfAiwk150iDtkqcWNf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
802753.035109	CMjBcU1vaLieqJUFRl	192.168.1.122	52672	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXTlUigN6Sg4uYJJa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
802878.122940	CuUspE4GnlprndxfRd	192.168.1.122	52673	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtRaym2huVmh4xhuQl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
803045.437863	Czk1zx4luwY3PnPMX5	192.168.1.122	52674	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1Zf1N25DXqAb9dQVh,FdJ1R448t7XldXjlC	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
803676.124897	CJZKy74Fi0g2dSFbz9	192.168.1.122	52675	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8gTTR1ku9NKt3DgGd,FZc0Za3pm0WdSky1Bj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
804012.893042	CRoY4L2WTcXROOq1Pg	192.168.1.122	52677	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPYyNn3qgX97d8LKUl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
804184.951908	CF4Ygh38hSPMW71FYj	192.168.1.122	52678	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FAYsTg2gtNWgQ8aRFi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
804312.269431	COEBCF4Jx9BlKExoR1	192.168.1.122	52679	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fzsa1P3TOqANBX4Cjg,FA6xBN1d8oIwu31fTi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
804965.949205	CWFPE41rh9xIG7aVyi	192.168.1.122	52680	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtBz2Y3R5oDe2wL5yc,F8JtV61zTTyeircBmj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
805304.731984	C3yNYueWBSI3wqHVg	192.168.1.122	52682	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUQgo41N4OxFgh7gz6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
805481.806386	CMAgDX2hvFI3q0GkO1	192.168.1.122	52683	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9wpgq1r4kFzzCR4Xh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
805639.127177	Cb2io71heXSuusjRgc	192.168.1.122	52684	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwowcP3uHNwCblTqS7,FPx2hr1KqwgvLAsgzi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
806272.816117	C4aPZ51x95l69IHxS9	192.168.1.122	52685	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZa1KU15zpWIXygLcc,F33aq74hjuOdFXCbR3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
806575.576939	CTlrnQRWZhYmK1pUg	192.168.1.122	52687	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUVskn2qhEVmwxiBoc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
806726.616501	CVm8t12ScMeEc7WO26	192.168.1.122	52688	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHgzcJjWWEn1oo0N1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
806884.938049	C1uert3HGsIGj5pb7	192.168.1.122	52689	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzhWnu2sy5OV2fzQXd,FRVpgw2qg5IMuBsDRa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
807453.616297	C3JB2o5NcYI18nYs1	192.168.1.122	52690	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuZqC44pvfBQ5fmnld,FQ7edC3Czji0NEhgZ5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
807739.403493	CYx5RV2pYEfGgjJLaa	192.168.1.122	52692	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMTqOH2dT9mGOmSDjc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
807908.485669	CRq2GP3mKB9A9W0lf	192.168.1.122	52693	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FM06S61hIHOHbY3OO8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
808086.806091	CsSPtr1fN3g2Kod03j	192.168.1.122	52694	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FchlTx42FjDmdaGWq1,FvUa4320pXqfudLcd7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
808735.469253	CAuoKl3vf4ZFykzywj	192.168.1.122	52695	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fvj7uoaOb50IXjTfa,Fhjb222iOjKSi6K3E7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
809014.259544	Ckwqvs3sOjTQtpEc38	192.168.1.122	52697	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRSTKK3muUtzaO0VJg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
809181.345640	Clkr2V34KMJcMKim05	192.168.1.122	52698	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZ7obj1gO0krvM2x6g	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
809357.664058	CjdHdu4Ii3ah1XLva8	192.168.1.122	52699	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxOXLu2T3VxrAtimuk,F5GrlzZmgxvFnBKFe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
809918.339748	Ca54C43Sz8uGrd6uTg	192.168.1.122	52700	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3V6GV3GHVA4scT6R3,F10EY56rPkIyvgOEe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
810167.839710	CAg3xw30dAzbCvciuk	192.168.1.122	52702	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fak8PI1gJWgGbY9K6d	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
810330.928668	CFnOLV2l9kteGDfvof	192.168.1.122	52703	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8ayZ94v4fDpLCdLa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
810501.247529	CM9eMw30xC29XyDLAi	192.168.1.122	52704	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F47KCs2zgLy1GtGorj,FqWsyI1bHh9Pssk6z9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
810770.414607	ClDVYx13cdNpEbq5x7	192.168.1.122	52705	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1fxwz27Mn7THdFZP6,FQamxh28enbmiStyZ3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
811062.233443	CbQY8nkjiYgq7ydOg	192.168.1.122	52707	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FxxqUD2cpOf4EPAXDk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
811228.348531	CG4suA3q2Gx1fmcK9b	192.168.1.122	52708	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwDZO94otN8bmB9rx6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
811382.664864	CaGSkJ1bSGBaIpAC9i	192.168.1.122	52709	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fliaj44UYhWGJzZzP5,FDa3jt2S013YpSNZ99	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
811992.341732	CgSnuT3GYsZ01HR2X7	192.168.1.122	52710	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FB9HM22tdCV3zoR9s9,F9SP3X2WyCoBdsrTc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
812269.114049	C3Ucb61p4grdVA2v94	192.168.1.122	52712	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQVrsq2TwyBoDbmys	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
812429.175427	CB4hR7Vonhu9Fg5Q4	192.168.1.122	52713	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F23qKb2Nh1vZj2cH7c	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
812556.492693	Cumxtc1yaAr7EdYbld	192.168.1.122	52714	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNglnN3R4czvDxuB0j,FHY0go24sev8PLJsd2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
813152.169254	CcM0ib1CmJYh4xXJBf	192.168.1.122	52715	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1IcvD4Tb3hboSGba3,Fje0dRNZ21BKf3o4c	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
813474.942835	CzWR0l2m3iICJjRnYc	192.168.1.122	52717	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTuCTUjDEpoqOJ7hh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
813607.018880	CM0StJ13tXSWv4Yhta	192.168.1.122	52718	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fy1F1m1Vh89YxwUAUe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
813773.342391	CpDkPj4sq9LVyh2Cj2	192.168.1.122	52719	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJOK1F6xk5n6URHA6,FwhSVq1cMhDEU8ljj3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
814426.020744	CMyb1w4TgsqMubM1Y4	192.168.1.122	52720	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzpOih2oQsZu5WvT0g,Fh71cH1oru5W5kc5Th	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
814705.794768	CY71ws36Sd8gn9xlL6	192.168.1.122	52722	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F15uqx3XE7KCSKMxef	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
814830.878534	CWBFSq1IX6q8t7jkQ5	192.168.1.122	52723	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDwF6x2QMNuXqIaEk8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
814967.198567	CMO59K3QyUz48hW1X6	192.168.1.122	52724	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKOrWaE8LyQhrZYba,FHmQii4IK0a9s61oak	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
815608.871537	CcsLMm3rjMDHlx43pj	192.168.1.122	52725	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQdTuI3UgZI5UsOmE5,Fo7Ggj23QllMVhun	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
815870.639630	CvdJSr3dP5hrT4PuIj	192.168.1.122	52727	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqSyZR36iYqtCq1hX8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
816007.700474	CbYKvZ3HRPILbTfOBd	192.168.1.122	52728	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrNmbM1YYKq0rQth8e	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
816182.015304	CxOi0s11S7PeZoXps9	192.168.1.122	52729	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7B9ggPVLVJFlyhJc,FewuDG3tkn5KvSkr46	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
816754.688844	CvhRxDcSZrXcrm98c	192.168.1.122	52730	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMkkGBYq9hWjuW7L9,Faedx44DsdMmRsFm14	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
817097.498426	CsboVy3RTfVl87Jnu4	192.168.1.122	52732	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpLX0oJPnO42MWZI8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
817238.599939	Cf2HQL3PBIVV3aCls1	192.168.1.122	52733	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOxUH34jQpzNBI3PLl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
817399.916541	C9fkYQ3dWFaC8UgPt7	192.168.1.122	52734	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeGuawEASuo7Ng1Oc,FVIHjTmAm7aYzlEZ1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
818004.586311	CG7Sg62w2IJdL8OhSj	192.168.1.122	52735	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5l20D4Z9SvTtGZB88,F4iQfY8F70ZF9c8bc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
818286.362586	Cn42xD2Wqn7PEL7dSi	192.168.1.122	52737	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWIKxWVhamGifzgC2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
818466.426910	C3H9rp4OeUls7wSHs3	192.168.1.122	52738	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FN9Seh1gdKZhxEN2Wh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
818591.759153	C5qL141fGdhILmtiIf	192.168.1.122	52739	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcbhmaqAA8NT90mV6,FMybuf2NC6I5ilENqk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
819242.425047	CaSRP24vsN5Qq3kx86	192.168.1.122	52740	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FT7gwR1JqM3vs236Bf,FqUa8J3NQvrRQA8SS6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
819535.163962	CQSrmP35COOsBL7va7	192.168.1.122	52742	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIsBX92gNeMBBu913b	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
819691.236254	CrBHjy1gQt91qKX637	192.168.1.122	52743	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FyFet5MQecTT9BNoi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
819830.561364	CxIFwU2JeBRrZMWKk8	192.168.1.122	52744	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5LhLE4sT6aAYnzE6,Faz4kJ1UysgxIXIDzj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
820411.236162	Cs8lh63e2jrhDqbdmi	192.168.1.122	52745	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLODDO2d1rUWLmuOe9,F2d9Pe4vbQ95qMx8Hl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
820711.711999	CVGhJaa0O33iHbaal	192.168.1.122	52747	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMiDrHzRXF9SYRRb2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
820879.785332	CHt5S71ap78SW6azal	192.168.1.122	52748	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3sps742mO5PmQK1ra	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
821010.107017	CEINnu4qesm47NqvA5	192.168.1.122	52749	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnuKzp36eTahXoyOn2,FWTSgE1r1CgOlzws71	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
821575.791144	CbtqtR37QjXi9OKDU2	192.168.1.122	52750	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUcZRG3xayCLqMjWmi,FUPWsy4GOckUGuMVdh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
821858.560428	C6u1YF1FrtQWjZyhTk	192.168.1.122	52752	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrvalNHQj3ZfNqEOc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
821986.626942	Cl0xTB32jo8MOTL2I3	192.168.1.122	52753	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPdD1s2Z9kFtwrchD3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
822138.949994	CEcezF4AGiKm0AQPo9	192.168.1.122	52754	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FizyiD4zvkXgypvwU6,FVrkOjT0s4Isxtfa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
822692.637018	CGAXRk5GwiNJfoe87	192.168.1.122	52755	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFdfHg3qaKKFoKSxxl,FMl8Sv4BrBAg48CI9l	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
823039.420389	CxGSkK71OT1yzQ8Mc	192.168.1.122	52757	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbPktG1cErbtRiL5Hb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
823169.497243	CEYmeG3KxrauQBPp6f	192.168.1.122	52758	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Ffl9Gd3BNblbJIMLm	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
823310.814965	CVW3md2S1J4GzXTrOc	192.168.1.122	52759	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FibxOH2KMYtW2AFAQ7,FfzCDv3jdQxkel7Mo4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
823857.501409	CCMCJq4foXhhsQuB0k	192.168.1.122	52760	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDEBtN2VWv9qcWmKfj,Frnd66amVDBqWr907	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
824176.258113	C5hNEq47y3SfPLmHZ8	192.168.1.122	52762	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6zjgkL5WoSwEEBU4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
824348.312434	CKHBuu14oJUi9oneuc	192.168.1.122	52763	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtR2q11AytGr2lpMk2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
824501.627457	CSAou3HVpMFtYKiMe	192.168.1.122	52764	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfY4sE4BTgGjEFm9C2,FVUEHOMSUpmnMcZrc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
825067.310511	ClhKGd4OvPJ4nCW9u9	192.168.1.122	52765	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5A2GH3nX4cUYJtXtg,FXSHv13XfYEk9vy4F4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
825375.786105	CpQOKf5eaf6VqQcQb	192.168.1.122	52767	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAdVcaeMXkvo60frg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
825512.846669	CqvAuo4VItSfp8mFO4	192.168.1.122	52768	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FjLEHi1oq2Kni8TaPa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
825663.167047	CRq0px1H2GqiRrB5i5	192.168.1.122	52769	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkwCSJ3jA2PFWOD034,F9PadW3mV68t2XR48b	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
826233.847796	CKChO43iUA7usnHdx4	192.168.1.122	52770	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4EXZk1bQYb2Oq7fg2,FEonazeAHyzWwJ7yf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
826525.613228	CyQVBSI9EoK4D4Iyh	192.168.1.122	52772	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fx8Xc04EFocMZs3dqh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
826671.683409	CXjX253r8VuIw8h3j	192.168.1.122	52773	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FY1xeA4Kvm66zoi6nj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
826796.006199	CIOwdU2gK6R24GibHk	192.168.1.122	52774	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpFUBJ3UJqMeUpTXP2,FiUXNY3LdcHWbFWsm7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
827405.682509	CCZ1hi3TeBy1Zj7mP8	192.168.1.122	52775	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5PgqD4j3Ntr7CnFLi,FAzxvyWirxOXa3Qn6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
827741.464712	CHTqSs4K6N89ItCVR6	192.168.1.122	52777	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqkoUI3qdHvOA1wbhe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
827879.539057	CCr67uM8xKymSw8Wg	192.168.1.122	52778	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYUIY51JNIBye1pvob	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
828026.855585	CojZc1y1deSdBtTI4	192.168.1.122	52779	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0FCz140WVZY2DhgQc,Fa58fpH0NoWqKWbf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
828337.051677	Cx3Kzr13atUPUAt2id	192.168.1.122	52780	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiPn0h4R3HCQtrjbIf,FzRFXA4WBMq4DVyzTe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
828663.822260	CMWpSU3Agz7w2HFgyi	192.168.1.122	52782	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0aGovAvDT4ZdeyG1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
828834.903066	CugRszPWdvXDyXIU5	192.168.1.122	52783	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Ff2tUEmLkimvs9yxb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
828962.230650	Ca776S3Ndmfrno2ZVg	192.168.1.122	52784	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMjLnzRBBMJ5xmq58,F7mPSU2yJNDoquCFhj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
829549.905438	CkEjqe1b8gS7B8Ljvl	192.168.1.122	52785	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFObVOoTv2DbTLclc,F4Qb6u2bU3Hf4IT7De	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
829881.704400	CcqTBf4y4YMKTiIe4k	192.168.1.122	52787	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWyTyx39KNlxrlYZOe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
830019.786477	CXXnDc4aIj16M5JSLj	192.168.1.122	52788	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FpdZhThc2eTyDKznj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
830144.109826	CpVFk92VExfS5B929	192.168.1.122	52789	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTMLr3hFeJB0cfLl5,Fzy5k82TYT7PCYS0zi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
830740.788302	CLiPym3mjK7P6VNvJf	192.168.1.122	52790	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fl2UqY11jlJ2krsEVk,Ffch793NUt0GAIUhg5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
831008.595918	CNLlCuYqR62Frhl56	192.168.1.122	52792	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrX5sL0eL1ncppvU7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
831150.682585	Cx6gqX3QunaSHjgbMk	192.168.1.122	52793	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fc8OP631QIN9uh0Z5i	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
831316.009005	CLuuPJ1kIqO0bmHMnc	192.168.1.122	52794	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJJFp54tU71amxIuWh,FGELuXYYB3oCNxn5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
831960.692279	C2vuuOJ8YNHP5l859	192.168.1.122	52795	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJ1qdO3XecCMZ5HEGl,FoTQsmuRNngveWa41	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
832211.178262	CUpQ6E2hHec4BF7rYe	192.168.1.122	52797	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHqMOZynC9ocTfSIe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
832355.244497	ClOhgX2PofJj13NL5l	192.168.1.122	52798	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FTZL8E2fGVlCDEeLod	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
832527.603077	CHrzxN1cwgdIJ8rrWc	192.168.1.122	52799	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfEowC1Jq6DQUTbPN9,FL6jcm37ANSmcmnU27	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
833153.286325	CM4cJwM9PoYlzuaRl	192.168.1.122	52800	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fg7meF2D3XQyL9Yqb4,FMy8xj45SNSseVuGX3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
833472.056401	CDBQeM3EXcQIOtNmGd	192.168.1.122	52802	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FN7wyC3KaLm2p3SDx7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
833617.128737	Cr4cm24M9iuDirFw9j	192.168.1.122	52803	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMJpFS2yEqhTKTBu23	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
833795.449734	CIKKVaytUgHww7203	192.168.1.122	52804	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzJwlJZ24qX05PTfj,FbjQ4YcVO6nKSdF77	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
834128.648862	CI4Ao02kvm01p2qHKf	192.168.1.122	52805	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZb4gq2rI4D47bSYS2,FTwSE81sedgMitIcL4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
834434.444337	CvKvPc2YzxQPgHLwdd	192.168.1.122	52807	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqNSYm4cgwOdN2FOK1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
834555.548178	CEwhPh4PIelu4F4Awl	192.168.1.122	52808	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FCpHkS1sjkvAXtPpYg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
834733.868825	C8xuIh2mY9nnippf6j	192.168.1.122	52809	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpA37C12WLzh8cwQH7,FIuPiI29RNiobhIgM8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
835366.568794	CnrvnF4X7S7Eo7h9Ea	192.168.1.122	52810	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuEg6QQKAgHrAefhh,FxtZnWOrCqsNO6fFb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
835679.377215	CvXQd21BeoNMpmeOm8	192.168.1.122	52812	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLkLm92q8HPUPOjq3l	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
835835.478107	C0V0mnaBTCSgN3Qoa	192.168.1.122	52813	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrFpLb2TxeyBn4THt8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
835990.796640	CZvQ814Xsko6FlhUxj	192.168.1.122	52814	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fqcgmx41Czl2OtpOS5,F4cEB23WK2ypga97t5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
836593.492873	ChqKIr2tUtgHMBk3G9	192.168.1.122	52815	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGCvEMfWmXF5ltJVb,F5KrRw2RV0SwSlRGNj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
836909.273846	CRhmcb2iHiVLoXrFYc	192.168.1.122	52817	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FaLIBi3gXhXSj3zHIl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
837062.362067	CpXz044NxiCUTTE976	192.168.1.122	52818	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4qJsl3wBi3eTN1uz6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
837217.690294	CrcqHd3QJcmh2f4jI	192.168.1.122	52819	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fjcmbk4Hseb8eZs1bd,F4khfBVDJf9eJrvW	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
837817.382411	C6gH8n46RPzPkwRg05	192.168.1.122	52820	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzpDAg1Iyc2zNZF6t2,FFGMnMPSpFuN7G3yd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
838075.197542	CWRMbW3R6LZaF4eJBd	192.168.1.122	52822	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlHWC126Q7gZIU2N46	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
838250.290270	CkrrHr1Q5aqXGe6Xl2	192.168.1.122	52823	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FkbgxY3RxK5z1XBpKi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
838390.606533	CQZYnS2XIi2u516qRb	192.168.1.122	52824	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCooMmiurmFHAt3d7,F6NjyM3aMWqPrx2O1d	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
839002.286124	CzcVhT2fGhaj9FMZS8	192.168.1.122	52825	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5EGMM3VpLjLVtRLc,FipFXi5s88N3bKtsh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
839294.035118	CBPKqJ2MdWlvS3bpj5	192.168.1.122	52827	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fc9DjN14OfGgu2fIL	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
839460.079968	C1cHRU3F3UYckQYCpf	192.168.1.122	52828	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfEeEi2b3vsEtVfcJh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
839637.399937	Ca2mSF4x5u27oAlLP	192.168.1.122	52829	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fxv7PP2KSqfhF1Q4U1,FKRl8w3BmMnhtYs0u1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
840196.082620	C9C2gc3RrGvoX36oKg	192.168.1.122	52830	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxjPTB3L1wgktZFN06,FvITrh2Ffe2hWiSrQi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
840503.879136	CDEC2046XEZ8R4YCL5	192.168.1.122	52832	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPyiYU3YRD0Yygdadg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
840664.982347	CbX5fcGhpKX45ARa7	192.168.1.122	52833	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fdwo6J3aedfUr1PSzb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
840837.304526	CwgM0I3kfzUvBYZvH3	192.168.1.122	52834	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiHygf24zahf3pA5J,FzOuK2yW75lIyQRci	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
841478.997251	CfaM7fmIMgZLE9Ima	192.168.1.122	52835	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGWsH61FyeVj3alR8k,FlHrYIc1647e4Etfi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
841792.775037	CVws1N13oyMtjtJ4u7	192.168.1.122	52837	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2CD1CgiptHB3m2c2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
841970.839565	CuZsIq1N73x1C5EWPa	192.168.1.122	52838	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fmpwi2BZPFLYV8Yua	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
842126.157476	CdNr7f2K9iqaKbAWKb	192.168.1.122	52839	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVRkGB3u5r9duDfKu1,FQtNzr4B2l5unAYdj6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
842459.346448	CDttQv1ZGbVSX6eGsb	192.168.1.122	52840	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5LkWg3tnGHKfXkAO4,FD2IF23cfoeYhopGEf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
842789.109159	CiXllZ3Q2tPEppIV3g	192.168.1.122	52842	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FSstmY2eMmcwuNxXOe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
842941.154754	ClNgoF4ac2WutG8SEa	192.168.1.122	52843	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgNniF2Ju9PaWLeKqf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
843115.469927	CHqid22UI6OdubuA8h	192.168.1.122	52844	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPmvYh3NogYp6ei2Dc,Fl8eiH5CmVyyw9162	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
843685.152728	CyJpiAvDv3dX1WGCc	192.168.1.122	52845	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlUGoR1t67Xft2Qv3i,FG0j1t1rob55PHURq5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
843945.918943	CgHSi31ZtVTH432szi	192.168.1.122	52847	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRDsdG2UhdgOEFpel5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
844108.993483	ChuHmbOCOrcz42Kb6	192.168.1.122	52848	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJKwDVJwJyAh0ppN4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
844243.311361	CaehIE1RYXLud3qGw6	192.168.1.122	52849	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FI2DfH2aR70DW0mGt7,FIRwxF2Ya9vGmZD8I6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
844818.022001	COodHr1XYXY1Jbi7ub	192.168.1.122	52850	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FA0TYF45GXumGPB5u4,FCm1yeIn4DDZgl8Nh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
845124.780825	CCTxSE4lkmgpRWgjm9	192.168.1.122	52852	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6UM9v10752VcWSv5g	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
845267.819461	CkC2aO2GmnZBroGh1g	192.168.1.122	52853	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrDXCd2q2ARcMucsAl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
845428.135287	C4euZk2k6oKJyfKqZj	192.168.1.122	52854	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9hnmN12ZCp03nblMb,FSiJYn1qV6dL9Bucsg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
846077.828983	Ce4pTM2JANXHicxRt	192.168.1.122	52855	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAhvjm4reZnaRVRpX4,FAogL11o1GWUg7Yplk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
846353.605008	C3v5ds3yFKEW89mOpb	192.168.1.122	52857	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0o4dt4GybhARVhBi4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
846498.659418	CAcyUJ1jJ13vnvcXB4	192.168.1.122	52858	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FE7v7w4HEA5uFYgfMd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
846661.978818	Cv6yXuIVeu5hfooD5	192.168.1.122	52859	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJbsTs2vNNXVBN1KQi,FIeqoA31pSTD17WQdl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
846944.575049	C9N31ajYytojdCO95	192.168.1.122	52860	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2DVS9PN3J18zNBcf,FwVSUi47WeMxwAXx83	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
847268.335985	CMyl4qHASCeOTIzN4	192.168.1.122	52862	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FEpZUC2GrSUFWyi9Ba	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
847394.408139	CBEd4I1TctdO8FEr7l	192.168.1.122	52863	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fn8p3n1YMuj6GlRe2c	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
847572.738231	CrtSJs2HnP0iZl9hy8	192.168.1.122	52864	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FK1zXg2Ym01ZhFZVy6,F5Bn6p4SgOdcW1xSrg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
847885.928668	C1BG41tnbGSNXlW62	192.168.1.122	52865	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNTwsN2PrI5LzqqR8,FVgD5g1wyxT8I9APwh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
848194.710868	ChBSKP16SCy3CMGZ5	192.168.1.122	52867	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGSlFX2XNsbjagiHzb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
848373.775581	C1Px711GfaPlFTqUZe	192.168.1.122	52868	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlOdSE3W1AzgU5ITze	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
848521.101868	CvP1vB3NEESOprV117	192.168.1.122	52869	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNKUtS3BsnM5b0VGP4,F7RDYY32s0m7mABlR9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
848818.299075	CN8SqC1gAjIim2Nqbj	192.168.1.122	52870	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQm2yniJcQCjirsYg,FCuMKzUT46j5NGmA9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
849141.064780	CqQToV3Z4bLQGhdJwi	192.168.1.122	52872	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHx8jA1XK0NaIsdJEj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
849265.137248	CgauyE37cuRpWPMnw2	192.168.1.122	52873	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfdZO24DQoy4sJdKN9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
849440.453751	CLpyzP1WkFMgoA536f	192.168.1.122	52874	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPxXlQ3yHgMIvQiHI4,F5Q72F3LhkeAX15pFc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
849735.637953	CJCrc535pYpkrjUOc6	192.168.1.122	52875	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBt3931FjOHPNnG12h,FraHvD3pwTNC5D3yik	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
850048.401916	CzFWS01KGVb2ZdGd1d	192.168.1.122	52877	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FyHrGs2lCoBefCQxVb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
850220.450596	CpdgQlwUcii5KeTWl	192.168.1.122	52878	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fpzgrz3WbyBW2jrxXf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
850344.783850	C3f56p2GJkDWU7yHqh	192.168.1.122	52879	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGdtjs2hVJrjewr7G2,FfkDRh1Ti971MSMbZ7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
850941.461870	CvF7iK1GARj9rPeS6a	192.168.1.122	52880	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBiCkm2uowNuVtEsw4,FiuJjC1vE9FXGpqEaj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
851263.213797	CjVoKW2OYyFAzbQWtk	192.168.1.122	52882	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F92Ues1Ql3rJtdHhmd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
851428.277193	CK7pqo1Y5KWv44XYW9	192.168.1.122	52883	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOwxkK3wK5OD68h4ah	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
851595.642409	CfpT2P22zJTjz0Thv9	192.168.1.122	52884	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDTZqk0Su5awMlGTb,FdWRdX3wWfmb2YoVSi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
851865.159746	CJgvtPg9AgsmM7B07	192.168.1.122	52885	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNlsM74rOBScLR1L4g,FD84Xq3jkTQ2LRaCwb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
852153.936218	CEhGEW1d03JtttA1Fd	192.168.1.122	52887	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1yoOFsjPT9t9IZKa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
852276.016309	CQMIOx4p3L0xiBa7Yc	192.168.1.122	52888	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlOhnjfvBPWehJLCi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
852428.339891	C4vmmPBRglhv1PfL9	192.168.1.122	52889	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrCeN53WnQQKxFP1Z8,FgyNL12afUh145zyY6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
852690.516738	Cmxhx02lctZ9SkPdng	192.168.1.122	52890	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVFP963VMFuWghik85,FOCZyG4EoCBgv7SSli	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
852967.299668	COHBsa3xCTAyGoaifi	192.168.1.122	52892	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FB8UhD4CZdnO34uwwi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
853125.555832	CyRwUd3JHqitKrXkd8	192.168.1.122	52893	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FakfSj4emNzf9vEIR8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
853278.431819	CSkr0g4T4iPCrksFf	192.168.1.122	52894	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FACELN3ezSfo6Rl1Hf,FTa7UU1u3hL7dYKFtc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
853870.112599	CRR4Lu3t359lTWIdTf	192.168.1.122	52895	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRtEji2tYjWyoqWXM7,Fpf2ru3wZ8koG4FYu2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
854153.608136	CX1BvyxlTd5cm0AFa	192.168.1.122	52897	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F29Q2v2Twm1YDiP4l5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
854304.883165	CpbXAA4uPdNWdjrdg1	192.168.1.122	52898	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fg1M18118xkANCPs09	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
854462.785376	Ccg8Zw2N7bkhPSLqse	192.168.1.122	52899	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFaGrX3mV6kxM9AjO7,FTZbpR1nE4jLFF4J99	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
854721.957487	CfSAcy1UOcssuloxx6	192.168.1.122	52900	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQA637syFez5XuNQ8,FIpQbw4kYbgayjbex4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
854994.742857	C7qcca3YRVNVTl8NTj	192.168.1.122	52902	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FplDIjCADV2GSzzKa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
855150.830295	CoJ5Zh1GjNLiQeCZKg	192.168.1.122	52903	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FAVm8b3tjc4hme29Qa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
855319.166638	CSaZuq3EBUx5B4SkS7	192.168.1.122	52904	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fz354uoOuKJLPM0Uf,FtwQxb4WeXz2gHgqSc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
855951.855895	CH3pPk1sSfGfOpGUdk	192.168.1.122	52905	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8WtQL1vnAvagrGWf9,F0x32e4Xr2dcFuP5Ol	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
856254.641322	CdxZDM2ijJIwb8JaI1	192.168.1.122	52907	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQ3WPY2XEsBMxTUEcd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
856388.869725	CXBZDu3Tp9FminQ4qd	192.168.1.122	52908	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYLD9b16HhQ3ywZAme	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
856538.549158	CbR16Q3tvTBlON4Ld4	192.168.1.122	52909	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyZRl73BQP1MljtqQ1,FMlIso4Kh4gRWMYoJ2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
856874.743145	CT1qKe42nbpJhi1kJ	192.168.1.122	52910	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIRoxN1ZWKW0r0lUVa,FYJj5J39yeNlu5yg8d	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
857186.538621	CYmFxJ3FQe7dlmIAQe	192.168.1.122	52912	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAc7sRTL0V1FKtHRb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
857326.637590	CjJBXZ2LfN9sJtAZj	192.168.1.122	52913	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwWmKgGYObrmMJTx3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
857459.963967	CINqSo3PUlauEsu295	192.168.1.122	52914	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGCQxrHui26IFsDMd,Fv6pjt3pB2fufytd0f	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
857728.149607	CcDE8N37LbEskPOxvj	192.168.1.122	52915	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTsNxnoHWNiGbOqEe,FsRaAW38ds1yvOSZEc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
858044.927782	CDCnPd4osOMEnZ4k35	192.168.1.122	52917	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FD1Nhq2Kd9sPms7fI3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
858186.003411	CLotRt1DDMgorixGba	192.168.1.122	52918	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fk5dc9MVGGJsKPANi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
858318.328850	CfURXD29YDPHUcVZc5	192.168.1.122	52919	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIQF5Gyky5JEmaKJ9,Fs9kNQ3GEUruVLQS46	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
858972.017874	C5Ws6d2f1cCyHc3xr	192.168.1.122	52920	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsrkAx1OSMcQSm99qf,FbitEb39HG7Mep7SS2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
859307.795934	CcyDeM1bGjA2kHoTmh	192.168.1.122	52922	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQuvxd3TB44Pqn7Vcj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
859474.886615	CH5mfm1pJqgdrMVeT9	192.168.1.122	52923	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5Hqdf2JMcc4W8tPcb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
859595.204125	CJLrYlZ9uBsrqVbV1	192.168.1.122	52924	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKOYGI2NWHHAriN54b,FrjpJG2XjqsKNQcdLj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
860187.916711	Cd1oDFylzgKpICSS3	192.168.1.122	52925	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqeUZrW18m7SPkH0l,F1unC82BrhV0Uqbu03	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
860434.710475	CWgdQ62O5TW8BFHOXl	192.168.1.122	52927	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FeGYqE3ny3UWjcAla5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
860587.797160	CKi71H3DkIGOLwnSSf	192.168.1.122	52928	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLg6cl2NHxm14guvub	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
860756.122952	CLIWz53HQauECxi9U1	192.168.1.122	52929	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEgxLG1BfUINWiwZs8,FtzMTC1rIZTUkkLsgb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
861339.802515	CWdRNl1DcL3IH8oZe	192.168.1.122	52930	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5iqum1eobmGUZgi5c,FN7SPs6bRryW8KJD1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
861624.284264	CQtBgQoDpd7vB3qOe	192.168.1.122	52932	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fh6Fh41zWK8vRAxPb2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
861752.331206	CkgHEb2Aac16iQz1th	192.168.1.122	52933	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7QguCr3S8TEbYlii	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
861875.652832	CPXFQD2ExYlhzqEgub	192.168.1.122	52934	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKJF2T2M2rA1gdaSt9,F92VEk43hj5tZOUPX8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
862527.339548	CvuNHE1PabRDCAh1l1	192.168.1.122	52935	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnUPft32yLW2K0J7I8,FGOcle33prCz1yhrul	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
862820.839954	CEdxcx2CLpLG9gkuyg	192.168.1.122	52937	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FeYdll2PlAIec7TL11	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
862978.934469	CuB0HW3YHteRLEvKS7	192.168.1.122	52938	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5Qi4e3jmBywbRPjn3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
863106.342340	Cp9F2k4QdoAkFWia3b	192.168.1.122	52939	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fo9mDo2FiV4n3ltHx,FVHBw92Khtek1PB1y9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
863681.028922	CeCxRW1znAGS5mo0Rb	192.168.1.122	52940	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwgNfN3LwkbZM9dLv9,F1JV9M1qpgE6vVbRM4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
864013.979681	CWA7YX1uqClPgXEBg1	192.168.1.122	52942	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLrq9rtPupIdxzt3b	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
864176.045983	COT6b24fGtrYZY0YMb	192.168.1.122	52943	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIfWVx31WW0ax33Ug4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
864355.367627	CBWebE2W6xNPhUVjU6	192.168.1.122	52944	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPEtslO8BLZsVSbmc,Fe62Mp1PafCOHrxTr3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
864970.062348	CH8jTPPPk6k3m4GGd	192.168.1.122	52945	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FICAIAF6yK7lqpQTd,FBLfd744L1GYkhyPYb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
865252.568039	CDPzoD2mT8el8evslg	192.168.1.122	52947	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F29iMH38h1enPaLDX9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
865392.701341	CWzicRnVxomkkTCX5	192.168.1.122	52948	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8Vu1K35K0d7kv8u4b	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
865530.337176	ClHdAW2Gmo1nFUPJti	192.168.1.122	52949	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPw8652OAhdkCbGGzi,FTheFB1CfskfmI3XZ4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
866112.044688	CouMqyKYoysqWQE1e	192.168.1.122	52950	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fz8VTvZ3LYz8UhBDl,FuGs3932qqy23j3rZ7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
866417.549535	Cj4FdvvumIJh24av3	192.168.1.122	52952	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHQJPa3AMhW9VHwXw3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
866565.631322	CrMgFg19H7XqYDW9e6	192.168.1.122	52953	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fq6ldX31I4YlquV3D5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
866742.950651	CUCEBj4eIFxRTjrVO7	192.168.1.122	52954	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlOKgr2F5FHACTZhuc,FkZB7L2EnJdbbgQW13	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
867318.628739	C0WWOt1PTbMpNDTZB3	192.168.1.122	52955	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtQNvR3e6COS5yXC83,FokhUU3xyZ6GmSfGHc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
867603.100784	Cg2s215imk3NzXO5f	192.168.1.122	52957	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fn3S5arPgtRkAs4c2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
867746.158624	CbyowGfYKwPXpivDc	192.168.1.122	52958	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fo2LPQ3fq8MwhlsEDh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
867868.488525	C7mPSi3i8BtJKPFvXj	192.168.1.122	52959	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIP6922G96o5vQnxW1,FiaUfScGc35rJpOqc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
868419.171040	CLZCaj4tZoZK9ZmV11	192.168.1.122	52960	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtZMyE4qzWEsycdxzb,FRrtW73nVcvCbWy2Qa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
868765.657028	CyZROWWz9fk1C6S2i	192.168.1.122	52962	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FSpyZh4c9iJvKrlio6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
868910.753381	CKZHXw2gcE1isKFnG2	192.168.1.122	52963	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYnX3ALnd8k3c78gh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
869034.074990	CGdygl4ezS9mp0P5O5	192.168.1.122	52964	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fgek3S21R0xdVaYQYc,FpVcJp2SlkDlol4zj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
869689.767816	Cx9KpPKSgRQE90849	192.168.1.122	52965	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPz4Lb6BCpeg6kZFg,FCZuAJ1WM2yfCCxa3l	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
869997.264062	Cmao6P2Lj9FnnYRxbd	192.168.1.122	52967	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMDWFC1vrOZDZ9Q3ga	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
870125.349769	CksQYJ1t4UMPwRsqkb	192.168.1.122	52968	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtY91o1duR7q3OoUM3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
870273.667273	CeNx8F3tpf33khy8V5	192.168.1.122	52969	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FshLkt4WCyLaEWp2O5,FJTYbo2wHz01RQbJn1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
870933.365369	CAlHDd2vdQCJrx8xqj	192.168.1.122	52970	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FV2xto3jHtvSSf8Fc5,FNHCkS1vb0gmqJhV44	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
871536.324019	CUoxKH29MyjoX9gfth	192.168.1.122	52972	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUSJT51OH0s54jqUcc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
871711.431006	CLnyF54W3kAg3SIGDl	192.168.1.122	52973	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FFZXda3XWjyz5UmhO8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
871870.752183	CfNZNO3wzEos1bsvRg	192.168.1.122	52974	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMDWc54K8XPndAGvth,FXnj7P2FFx4tbD89E2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
872431.450473	CSssl31YVOCe4JdXt7	192.168.1.122	52975	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FivbCQ2WPGJF4VDxHg,F5aLaA4ewHqE4vGYn7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
872697.972572	C0V9pv4Cu5ohxO8dd1	192.168.1.122	52977	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdaY533BBFUga0yJC5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
872832.101379	Cc7M5l4OsFilaCdXdj	192.168.1.122	52978	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUEWYIvdxzMMHUDIf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
872999.417203	Cr8S4s4EHe7YxHDDth	192.168.1.122	52979	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMIsjs1zJkYr3AgSRk,FRQSpxEV64Q8dnCf3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
873328.599570	C3QQN33h13cpTg5dAb	192.168.1.122	52980	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fp8scp3ic8qcmXWF46,FXQylC1CXxjrvVj93l	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
873603.083292	C7uv7X1rDNESaHjPC8	192.168.1.122	52982	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPq6WD3qtPyKy7GIt	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
873729.192610	CodoZYu1i4Ve1x6Ib	192.168.1.122	52983	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGahHE1yzIDw9UDYrk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
873871.520741	CmWF0q1MLlEF5eeZ2g	192.168.1.122	52984	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJj8br2X5YEinDdsAg,FXgSBEAbc2l9qxtph	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
874445.195646	CPMQAo2RE3sceWJBya	192.168.1.122	52985	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F34KKJ3YTPdjd8TYG5,FvLgnm4sgn8NH4x8J8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
874747.658370	Csdz0swr0X16d942i	192.168.1.122	52987	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FfrFdF2gGTd7hRN9N1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
874868.739665	Cmw9P64WC0YZ6aN6b2	192.168.1.122	52988	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOX0iw1LJrwrvqyfi9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
875005.059841	CnZRltR7ft33g6IF	192.168.1.122	52989	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGskVx4hzl3nlzw0l8,FlahdT3rYZ44YArGR4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
875589.760663	C1TG6XiFmo6fMzo1a	192.168.1.122	52990	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCHRhg3psim55RiXAi,FYp2cn3Uh6lL669el5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
875890.265454	C0JRQjHUtuI3keVM4	192.168.1.122	52992	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4w0DE2uOkIbbkpBg3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
876049.364290	CQw9R04uVYRnoKDIFl	192.168.1.122	52993	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FkNvkv2YpeVEvnfEN3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
876195.692208	Cnrid46lalxdhmidg	192.168.1.122	52994	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZQ3cDR54qAWM9Xqh,FiGUatxpBiNYhnR4h	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
876795.384068	Cp85S12ytfKrOD1eo1	192.168.1.122	52995	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FH1mWW1D8mCbXMfvY7,Ff2D9e4wfzj8du7Q3g	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
877404.361051	CobGNOcOEmdAumDi	192.168.1.122	52997	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLMOk139IIzDtAsoa9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
877559.479335	Cf2FWK19VY10howOOi	192.168.1.122	52998	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdCcER36mgoF52zYEk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
877707.794533	CQEiJQ2fJ5vDU4hGjf	192.168.1.122	52999	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FF4dCe4VhWWox2SNd4,FRHNgw1BnWPvqoXkA3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
878276.473376	CT660iUuPqWDb0jWa	192.168.1.122	53000	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FE0LG71P1BbN4omx56,FpwWjn1cadwsSjrSeh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
878581.957121	C6UCnC2dGqeC0d9Wj6	192.168.1.122	53002	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDbyylfKRbX4tB2Kj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
878728.048295	CEew391yj9HaPDEMfj	192.168.1.122	53003	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9IFUS1IetZLOQ4r87	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
878896.374643	CeUt0p49uoQdO1mTI1	192.168.1.122	53004	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0ong11CKPGkVwkKah,FvscREty8mQi2fCkh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
879439.466159	CrQs6P3dbsVL5OcBq2	192.168.1.122	53005	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCYmONMEEpGs32Gx7,FFyUsB4QhocRW8KWr6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
879775.947459	CKAZAX3ugTYrwigjpg	192.168.1.122	53007	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F18rMs2YBrQ3b7bQ25	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
879905.051051	C8j8a24IoduWdlSqI9	192.168.1.122	53008	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FAxY4a3m6WjwFmF0Il	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
880072.425389	Ce7IcC1FFtdJMPsCR2	192.168.1.122	53009	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fhql8i1aulwzbDWKE4,Fqo5hu36Elty6vlwjc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
880331.618285	ClnF1l3AcaIlHtpQS6	192.168.1.122	53010	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjZrng340dZoHgQq03,FZFYH03itKOKnnHhib	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
880644.110161	CX4BTC36sr8Riq5fy4	192.168.1.122	53012	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fz9Yde3DwURWZp2gD1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
880806.186311	CRE2Sw1NSPg36bT5v	192.168.1.122	53013	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDs3i24EixAxPhr8ah	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
880979.509972	CF8n0q1vpTQNCuwCAl	192.168.1.122	53014	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmclbrcDhQCRUpNsi,FQsV7ISgPt8BctlNd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
881617.196754	CskUVa275nDClvqPOa	192.168.1.122	53015	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyHQbGePQoaC3Mf7k,FrMbCh4cRlr9MZ3fjh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
881908.675725	CDGhg02e8GEobTw4Gh	192.168.1.122	53017	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwPkmItY0zqIkF4e	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
882053.749948	CaFdv54uF3OEtsUy6i	192.168.1.122	53018	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgGvUo15FRNONRTci9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
882228.074810	CdrVEC3gmRK5KZFSOa	192.168.1.122	53019	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNURQ21RO1LvD7agAf,FNOCBdATjmAlsZR2d	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
882859.753245	CyWuy1Va89KaDfnfh	192.168.1.122	53020	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTVf1j308WFprTG8Ti,FDJOJS19SoqgKy2zL1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
883193.244769	Csqvjd1fSL90r6fU92	192.168.1.122	53022	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Flmk7N3T7qCK668jy	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
883367.328905	C3kBZ51Z8lQ4Puu7p6	192.168.1.122	53023	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FiTrhK3MV5kDgDIPm5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
883528.645161	CppagnUnvm3AbnD9e	192.168.1.122	53024	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkA9vvx79NaeWfn6f,FDyHkq4BPSNK5TEgh3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
884160.334380	CvAxux4gomeAeLWb8j	192.168.1.122	53025	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTIuNr1hJXCt3Bfqr2,F3eKasWWFxg0fjkIh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
884456.824223	CwyGfpViIDOb3XhX7	192.168.1.122	53027	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FiS4T52diRzkwnht84	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
884608.924021	C566sP2RerqE58Twgc	192.168.1.122	53028	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fo8yMN1R9Vz4r9ZRrb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
884758.242964	Cy4LSjKMUlgpMrzO8	192.168.1.122	53029	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVTEZp4fo479BP2hW6,FF0fhK1A5CqoW4v8I7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
885359.927855	CwQbZo1pJmYr5wtJ46	192.168.1.122	53030	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9B5zUvYEhjj86i72,Fa3gwP1NLAgNC0ONjh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
885687.436591	CzpX9MelogrQqOQKe	192.168.1.122	53032	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3W7ps4HPIvTVZSh1g	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
885838.532302	Cl1B5S1MdhhgUz9ZJ5	192.168.1.122	53033	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwKyDD3rJ5Q25tNF49	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
885976.854791	C2soxm5sgNjRJ7nhj	192.168.1.122	53034	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FH5slk2IPNt1YtvA5j,F63yEC1T4NPUeN4lke	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
886550.530249	Cd2Jfx4R7i0zWZ2K5d	192.168.1.122	53035	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuNGej2sS2TTnwYKil,FSGzBm1yPEUeqexCs3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
886879.037437	CBp1d517DLfu4hJFOj	192.168.1.122	53037	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FW9VRx4f1OCEzTbv64	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
887033.139505	ClB4ng3RddmYPbXgK4	192.168.1.122	53038	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fy7Cwj2808vUHCprYh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
887193.454081	CXhMC92XvztIjDHc31	192.168.1.122	53039	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCJwjy4DY5zELKvoKf,F8JQIW2RKNNrKTlrT7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
887797.152474	Clbrde3uWZGLOCY1ng	192.168.1.122	53040	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fw9dJs32HXfmwNWPwd,FannXy32ZEmAGYUa42	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
888094.635593	C3g5Se4SMXMTZpe6c8	192.168.1.122	53042	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNeA6i30aoCMKlNgr5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
888223.710341	Cua6Fz27gksFidGY87	192.168.1.122	53043	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FV3Geh3Al9WLvJ1FTc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
888367.031207	CZzW3N2090S9HGcFXl	192.168.1.122	53044	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FobE664IhzXtntQgId,FsxrbcNyFJCpeU1Zi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
888702.203896	CqfFpr4q1Qqb7iZEbj	192.168.1.122	53045	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTc7T04LZ5JA8segei,F5Ds4U3HfauswNjh4c	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
889001.701443	CHChvl4hpLSW37a4j8	192.168.1.122	53047	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0Ifn32U0ViEV0EVoj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
889148.841224	CdnJMZ2pfyrID6ME3j	192.168.1.122	53048	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlYgZp4L9wY14WTWG6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
889279.173008	CO0c4u3APLEYzYG2lj	192.168.1.122	53049	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHF7FM12YrT1GZsjie,FfQLB23flfwbwIMIMg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
889600.364970	C2xD194L2hLjfno5B8	192.168.1.122	53050	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fz6G664gpSwfs9kmh5,Flysa27RIFciPYD5k	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
889897.840706	CCHI5uLKgZ8BQt0F3	192.168.1.122	53052	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGsFc5KM0Zfi1KWH5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
890025.922191	CgDg39Lim4vjyYBsd	192.168.1.122	53053	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8hdSNCMM9jqVLEV3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
890147.241114	CIGzmV3M46S46TKUdc	192.168.1.122	53054	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZoYAnYE5HvXXAfvd,FEQLep2u0AwKniDbPc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
890441.414412	CzO4bo2M7Ktj9wut6	192.168.1.122	53055	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVIRQ62n0KFex9VVMk,Fu1XRC4CR5APmOGUjl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
890745.929988	C3k66U3OjqxsHcrAmk	192.168.1.122	53057	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0tdhP1rIWI3TVTff1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
890878.047357	CKQkoO2AJ6v812Os0e	192.168.1.122	53058	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FvNYYC71Soz4slSGb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
891046.373651	CdK24k1msBtLHdGA4g	192.168.1.122	53059	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWH80xFb8HmsMUUM5,FSYDrZEzxmvbfoYjf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
891399.571388	CMhjSi3Yp5tN5sl1bf	192.168.1.122	53060	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWRHGu2DiXL4hFcO1b,Fb5KbFgyoIBVCwZ52	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
891692.060418	C3275t4KuTIv1IooJ3	192.168.1.122	53062	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FV2qjF2bDARfHSun61	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
891847.164073	CdtvQIjVaFsisNvZj	192.168.1.122	53063	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FY7FDG1eJuyfagOQK9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
891996.489766	CeHLaf4uQoQw7fFjak	192.168.1.122	53064	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEcZjF2kesYfyxXvEa,FWDqkR31FulkNwAvQ7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
892613.176607	CMDO3828i8wKD7cRR6	192.168.1.122	53065	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9cRz1EMtAKFEPIR1,FaN6cx2NhHwNwqhSFk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
892919.688229	CUfpHz4X2Bq4zGSEC4	192.168.1.122	53067	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1apGad51NlC32l52	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
893098.750013	CHWRF33PACtsjzXPYg	192.168.1.122	53068	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FuIr0h4IIuCGxJtNw4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
893271.071921	C4lHtA3qfLjw11ihub	192.168.1.122	53069	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIuM2E1mEUUSA4qBWc,F8Af472LEyc9rkCXA2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
893885.745885	CaNBiz16VpHEX5SL3i	192.168.1.122	53070	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyC0kD31vyySjL9hg,FufFUiUA9tAWCLZec	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
894174.234034	CQHhO8oOe2q2dvxxc	192.168.1.122	53072	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F813TbZmegDPl3ah1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
894299.366726	Cj1rCkAAuo9VhU2u9	192.168.1.122	53073	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FuCWnD2LSLQtQ8z5Rk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
894469.686172	CMIlvKaB2K35rugz	192.168.1.122	53074	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHvTC51AZOS3hQwXn3,FFA6ei3z6sb6VCmAc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
895081.365284	CGwCbo2rqdaThFcfBg	192.168.1.122	53075	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiGjnu3NEA4xH0qnvj,F5e47e5V4QDYwUEHk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
895401.849433	CiWld91xwgN2d2O4k6	192.168.1.122	53077	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FacRaD33ST6gfB0oG4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
895561.932484	C34cuWGqRgILYhxUd	192.168.1.122	53078	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FA4wdo3S0MzNSLWsra	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
895721.255131	CRzyAb3NBQIaaJVVx2	192.168.1.122	53079	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7Bfcj1J00QJAnO4Se,FrxgZV15cTTvvtLwOg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
896361.946666	CaICu4445cARbhOJJe	192.168.1.122	53080	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgInBI2uXUnEl94J8l,FBRmMC3MgJdb1tAN0f	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
896683.410630	CqwXv21h98THDprLz6	192.168.1.122	53082	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZVGov1Zrl3xWC5l0j	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
896830.496601	C2bMXw2MM5BNJoxaml	192.168.1.122	53083	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJzbau4dyU131GZjNl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
896969.820906	Ctr4pz1TvXmxXy7lDc	192.168.1.122	53084	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FviiJZ3u3pjz4UatFb,Fd7eAb2THWrHEdni81	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
897300.014998	COlfkl1JokAceOL5h	192.168.1.122	53085	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNxv7o1cp0EHlRuhE9,FQphwh3oxvp7cU1NI3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
897587.484272	CWrhnZ3BIVH7BYc4fa	192.168.1.122	53087	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCxCDF3Q4fSwOZy1m5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
897760.542939	C8hiQO1U5ULJyCabif	192.168.1.122	53088	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHnZ6e3HdPXEAAdrA	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
897906.867721	CJ8Oid2akDQCsn6XT4	192.168.1.122	53089	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDKHUm3PhTssg5JH4a,FuAXHs1Y04ZPIbmqk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
898561.568659	Cjtf5FYEGOaW8Bh51	192.168.1.122	53090	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FW3XM44u1EkiDuVUOe,FlngKq2g1vPfsBlLo3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
898864.054045	CPoQPW3g8iRVnvtoH6	192.168.1.122	53092	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fu272r2y61G0cQNoQ7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
898985.153220	CrqMLO3leTXjqAD1F8	192.168.1.122	53093	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fm55f23yyQagIpdqL3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
899118.479631	C62kfF4dDBmIVhzAwa	192.168.1.122	53094	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkIYWa444LztaSKm4i,Fw9gfA1naGkmz6zco4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
899696.180170	CbC1vi27bcieaEsHcd	192.168.1.122	53095	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FI801049wMD1YG87v8,FrBFq73K9Prhxe1Sw5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
899952.657089	CNKHQk3LebzFiKi8ic	192.168.1.122	53097	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FI0MVrbExcxQ36SRb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
900131.742239	CT82LF2iUL2dwjIU48	192.168.1.122	53098	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9Tbqm3G643hQQVa5k	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
900282.073308	CwMJTd4kwsbqpTOrL	192.168.1.122	53099	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FD4EXh3YGjysMMJhDf,FImYjx3LDwLgbiAesb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
900914.772433	CoWl6a1vZ9COK3xYQ3	192.168.1.122	53100	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDenMUmMAwkhFGJAb,FJGWfH3meKKkE627c3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
901224.263883	CuZ5tg3PQfnzinooEe	192.168.1.122	53102	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FuAHLy232WdlWjZcU5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
901355.352023	CRgzv21AotSYgkvox1	192.168.1.122	53103	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fs9VT33ChviEmEKVE	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
901497.670481	CzwEVReEnfajgLXB3	192.168.1.122	53104	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7SAkeZqAzRym7i87,F9Xzv046H6CeAgoU49	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
902048.362927	CMjdHq1uvFX2d8B99e	192.168.1.122	53105	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuN2rW1gFMN35hrKR6,FmycZC4vBHw72riuGe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
902335.859590	CkaFT82RGw4QTUQoi2	192.168.1.122	53107	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fyilor1putF2h1SOdi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
902459.949607	CIAhqu2xViM2BPtNQ	192.168.1.122	53108	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUardM2FLJgtLJlCUe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
902596.270143	C4fBNc1Y569LIOkkwc	192.168.1.122	53109	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgC1Yw4Gi6lV47Vkte,FhE21tI20A3JANgKk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
903142.965954	CfVPx2qbPPzIH0g2k	192.168.1.122	53110	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiR5t1DRDt9j9QHQl,FI783K2uOMnKBqBMbl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
903493.415037	C4Aiv93yKx975mzyg3	192.168.1.122	53112	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F68AbS3TPUhOmBnYml	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
903628.469837	C35MWjRPENvecDwW1	192.168.1.122	53113	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3rdS6M8tZ9GmJr0g	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
903754.785745	CYTpRi2tT5pMJYzdmh	192.168.1.122	53114	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fuf8vC2v6CcnfPCVo4,FvO56J3bv7ULCmUZW8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
904367.477244	Crab3u2krSyGHTDc1f	192.168.1.122	53115	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9yG0248yMG69CxSgl,F6T8DwVnu2G0W4P2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
904687.957440	CP7cBV5KwaHtvKErc	192.168.1.122	53117	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F9f7kC43tTltobZnne	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
904828.034433	CS5Stm240YQ6boPuIj	192.168.1.122	53118	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMeafo1nFKgLPzhuye	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
904998.353624	CXipBy2tTHeRandDT4	192.168.1.122	53119	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdmkRt3SRNeKKMxCL5,FuTLzT18ZSgPvRceDl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
905542.045339	CdeAkY2yAESJN10f8d	192.168.1.122	53120	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkUZ5n2NX5QN14h2W7,Fa47A43xwBgtNfgaMg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
905879.540225	CtYP4s2mzMy2F7uVPh	192.168.1.122	53122	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXoIn44pn0aAl3Tge3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
906000.620636	CwTe4i35Cqbt5S5tM3	192.168.1.122	53123	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fo2xUR2QK5Hg8Nr5h2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
906125.944860	CxOrAcc56XUsskPCb	192.168.1.122	53124	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXQLqB1wjv5a3Xc672,FVK3HyqDOPSiBzLtk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
906724.646890	CK3O9M1w7iTX9Z8y6h	192.168.1.122	53125	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FONdRu3g5UNSMOrex3,FqSOSH2RlrwOFp5YHe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
907013.133545	CZTTJc18IjsVHkCmGe	192.168.1.122	53127	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fn4H084KyqRn7xfLyj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
907136.222910	CwYXr02a8cifm5ORQh	192.168.1.122	53128	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7HGaB1Eff2BpLaoig	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
907313.542648	C11QFy41n3OiEoU2kh	192.168.1.122	53129	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiqS9t2VNct0cQw5yk,F9XAUG1Z9jPEqlA30f	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
907960.232151	C9eXvb3YFgjFjooax7	192.168.1.122	53130	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0SVku11IcrhF4M1Wh,FHQf8n1DahqF3dkLY	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
908269.716619	CeUFU319Z77NrAm81b	192.168.1.122	53132	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCMZ1IvaTKmJ1kwtc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
908427.779827	CEmRGZ3s8Vm6sF3la5	192.168.1.122	53133	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FH5tVr3TbH1Y6l9nfj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
908559.103430	CzoyLesMmmpiCMxnh	192.168.1.122	53134	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzDR0G2Ne1cHbbiYJ8,FkQUn81FeY8kBajZ3i	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
908800.299970	Csl2qJ2Mk4UPPWiJCl	192.168.1.122	53135	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3NcMb1gSXUSOD5YLe,FTGlkB2vKjTfN1zf2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
909106.777500	CkI3lP3JGlJMBtsO7b	192.168.1.122	53137	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBWFxZ2Em4i8mBicq7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
909271.883442	Cehkws37UX4oKxkLV1	192.168.1.122	53138	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fk9z0f3mOWupJYZCv9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
909447.200167	CmT6lf2iC9sPbNBKK6	192.168.1.122	53139	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJNg0V36bh7lh17rr,FauYJE1oaZ4t7QRJ85	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
909763.374755	CNi1Se3RQskdBIYwd1	192.168.1.122	53140	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRkpK71jHSmSmBsjki,FuEjkC15eWWYwt4TAi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
910060.858484	CksGPD3Uy1hM5epq25	192.168.1.122	53142	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFmm69MzbnKS6Dzaa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
910222.921104	CLd4RD3PUTLr6Tx6Yf	192.168.1.122	53143	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9NSCP1I2IEL6CrOO1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
910350.238463	CQFQVx4Lcf77f2BXzb	192.168.1.122	53144	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJ64l31oJA3QNwiQm7,F2ZZiV3yORHAlctksl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
910990.919624	CcEhBv2WTDSmrrkHi1	192.168.1.122	53145	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyIrW7gxw7rsCW6pg,FUc5WF3nZscdHGMjrc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
911308.396843	C8ipQZNt3HKdRCha1	192.168.1.122	53147	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQUwHL1v5tXs3RmB45	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
911446.490535	CCqM3u2s08nW4kcAP6	192.168.1.122	53148	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqIMTc3AFrMWdBEaaa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
911617.810980	C1DPVe1ACLnTqI9js4	192.168.1.122	53149	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpleTG1KizPvWdxJw9,FAN2L620vjGSB08lU4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
912224.493029	Cnuq2lxY850q2IA4k	192.168.1.122	53150	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fqqch21jPl0Wpt5EAl,FBDrdZVvKUMqiQJk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
912824.463429	Chbjph1Ij37PocF6Vk	192.168.1.122	53152	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7IuYr4TdhrV5vSg89	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
912996.539653	CADZRW24oz2hCTXIY5	192.168.1.122	53153	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Ffqj0D3Cm8YMYN9p6i	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
913142.862316	C3GFzFUQpGljwWMW1	192.168.1.122	53154	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2eDJW30unWsPLAa8h,F40HOY32LXckrvbwGi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
913751.549963	CFLp9a4ftVDOtrh7Rh	192.168.1.122	53155	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAKJmF2w5eyqIfVJI9,FsZGQg4c7GaVpevVFj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
914064.020723	C1YzjErg8BDThmCoa	192.168.1.122	53157	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fw0O2i2hx1QMRbObS9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
914193.139349	CmwUP53aWJ9rjF6dRa	192.168.1.122	53158	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwKabkjD7NF3cusGa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
914329.459508	CL347e1byrelWPfIq3	192.168.1.122	53159	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1WHOc11oxAn8nfUJ2,Fk3I3Q3uqUPiH1tkL8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
914892.158841	CVHVaYZ5GGwRc0iih	192.168.1.122	53160	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fah5Ae4j3UKXBFHOof,FXsKPusSAbythng4l	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
915227.664381	Cx3NaO3PPjlWlQKwod	192.168.1.122	53162	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgLqHjFnLbHpkWyPe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
915406.764059	CzDTKy4MqfiTO75Zve	192.168.1.122	53163	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8uBlc0AfHcS6pFoe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
915583.082081	CG6hW7gf7ueCYhjTi	192.168.1.122	53164	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpvqtS1La65xN6X6S6,FBRmbN7uTFASse9N2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
915905.586322	CsizAcqsWGiUOZK4f	192.168.1.122	53165	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPddwp2tsvevNLxMv7,FKOMRjtxwB8kBFmri	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
916200.048117	CprKWa2v5mZNauGItb	192.168.1.122	53167	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmxVlc2B9S7xmQ9wok	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
916335.139010	C6MFyK2UOnucAinNW2	192.168.1.122	53168	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhfDvO1tOeUIccyGHb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
916490.467128	C50WE43VOLrvvDJkXe	192.168.1.122	53169	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaDM361Cjf4jOxebt,Fr8pFp2zQzsc52198	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
917119.150607	CU3MnLPw8X2xlZLyf	192.168.1.122	53170	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9qZtIb95PLbETwbl,FrQvWe31thXrq1s0mj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
917396.628136	CvEml14oz8yPN08g66	192.168.1.122	53172	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGiAKd2WrUbylHrMo6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
917567.721820	CLYeRr37caJyxKrtek	192.168.1.122	53173	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOxR2ldOj9xbLotEi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
917729.047673	CI27Ts3j82X1Eywyxd	192.168.1.122	53174	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNVbV340JFnlej8p3b,FPpUA030wGnXoQJXZf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
918346.735554	CPRBvW3dMp5kJkUC91	192.168.1.122	53175	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F31Vrh2xunWG5YEKv6,FhVnMC1djI9uh3iN5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
918649.217244	C6xMEr4r1eXRqPoCqk	192.168.1.122	53177	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5Poh10VH5MtpkEfg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
918816.316706	C618pl4USPoGtcCs5k	192.168.1.122	53178	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJZcmP1nORZS37y41h	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
918991.632921	CLqt9M1Pd8FcWpjwAa	192.168.1.122	53179	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2azWQ2HumUYT1nds5,FpYxAi3zr41tfrtzN7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
919590.323728	CKTo4xSA6D6tcqtce	192.168.1.122	53180	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fqiljl4Q1TBmwRzqbf,FiIifL2ff1paTfXDZ2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
919898.798831	CogRYg1sEk8gzEGhq6	192.168.1.122	53182	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fn7qji1tXUDExXivSa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
920027.888330	CvH9vPXMLVFMFfxNe	192.168.1.122	53183	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPQh8m8WhCII9LCFe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
920157.208994	CVdZ7o3aqtVGSEKHR8	192.168.1.122	53184	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1Pi9a4vdZejRD0e55,F3Lul73LwU5RH7bR49	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
920754.898262	CGdYoVHmHEQZpmXt	192.168.1.122	53185	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fuwx1T3cVBwXbr5R4e,FFIuN74IX7nTj7NaQ6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
921062.387811	CFDnGw2aTNMYJN1In6	192.168.1.122	53187	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpuRuwxGz7QrMT5Jf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
921238.488805	CUDL2i4T5a8IpR8nZ4	192.168.1.122	53188	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9Lb6cEIDocJIJd1b	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
921360.809238	CYqeVm1BHf6dNh4Jte	192.168.1.122	53189	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzpyWB3EcpXTFCMPxh,FpNnH02Px1brINtOJ1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
921917.509806	CdC3K8491oqrfUu8v3	192.168.1.122	53190	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2pJ6w3lDd4FAbuND,FCPHxn3yb8JthmoYB2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
922184.005972	COn7b24KXvxEXvNWRc	192.168.1.122	53192	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTXYTs1J8AtaLvIpWc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
922355.094493	CqSlBT2cIAO8cTOgA2	192.168.1.122	53193	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FghCpg1cIso9JshTxg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
922500.427313	CQbNjI3BDzgivx4dHf	192.168.1.122	53194	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoVaidL0lPMAY5YT,F9X2gv2QhnVMj1FSrc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
923044.129402	C3thUM27mbnkOw0Mtc	192.168.1.122	53195	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiALTQ1tMaI7rxYhVj,FHezvt3MIMe5z4PzGb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
923342.626475	CLHHLn3uSzpO0K0GN8	192.168.1.122	53197	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZDu0w4oDhU0XWGFVb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
923485.710077	CeCIQzf0fSDrhCWje	192.168.1.122	53198	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FkZeszRMaLWWxaZlh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
923624.033104	CwvqSE3vOFn7KmF793	192.168.1.122	53199	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAPv5Z2uxfowAgEDHa,FNyFSm3dcWU2byZzic	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
924182.726553	CPnMC146DNxSSvdKL1	192.168.1.122	53200	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnXl1D2z1D6SYwFMRk,FXvMC22u1U7NZh6XGe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
924491.245138	CDhtLA1NJfcoIKBhh8	192.168.1.122	53202	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FvAIT1263OyIZPWkqd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
924657.364516	CBkGRflz3vOYzZcFh	192.168.1.122	53203	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOAVZQkGrAmaM0dS9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
924819.683118	CaNpCa4Jlmxyq2IkNa	192.168.1.122	53204	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmHiv4YmOorjfvsGc,FCco7XbcRI7aG3eAk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
925427.376670	CdNCaHv1LcBSfbNDi	192.168.1.122	53205	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Feqi2X3gNA5yZWqQPi,FTkbr139ZYwh03Yiu5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
925742.843846	CWXYeP3PiVq2QS2OVl	192.168.1.122	53207	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FxMeQY1SxhWReNNwV4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
925912.930534	CFqrVy2tLIO4YPX4qk	192.168.1.122	53208	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FvuNH22yGWWgJGpdSf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
926033.246878	Cx3zzb3Dz1Ugsyz3of	192.168.1.122	53209	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDTN0e147CaRv8fGjc,Ft8wZn3WkxNe11Gtze	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
926584.920398	CW8pox3mtI6AjD0S5	192.168.1.122	53210	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGYEf02zx7Sh50ijWc,FvF5ow2lURjTJHWbZk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
926855.414708	CGbQrWWaY8AT7nVbd	192.168.1.122	53212	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXQfLf1CMkhvzCIula	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
927032.520441	CwIoOD3LAf5olODIa8	192.168.1.122	53213	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FH05VH3WVpEW6p0LI7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
927188.838685	C9Dfnf4qgolqgPOhd3	192.168.1.122	53214	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDVMVn1SId5Vr7rgHg,FyFPcLQLVrFdNkELb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
927804.523890	CEng0F4UDWoqYBTEHj	192.168.1.122	53215	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FixHA82WJGv9EXbsb1,FRRqkMBYrWoOiQGgd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
928106.001209	CEDKSv19L47jEyuOh2	192.168.1.122	53217	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMnuJy2Lt8JJxHV3Eb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
928258.091659	CJ56xR3GNufaLnXJHk	192.168.1.122	53218	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhFA9D4rIe8e02eE9d	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
928394.422855	CMa3qk2J7qbWQ72l73	192.168.1.122	53219	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpUr5EmMihBQ2oVl4,Fdonjl4M84iTUIKVog	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
928681.614683	C9BB8Z3GyQ2CYvTNV5	192.168.1.122	53220	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWh2Uw0num3L27GK1,FrlCOg1FJw055JlQ73	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
928987.111110	CrC03D1KqQaCUahYpc	192.168.1.122	53222	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRJLsG4OkExHWFjQ32	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
929154.240383	CZIPAp3EmWNU8zUpCa	192.168.1.122	53223	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6E4nt2KFb8brldl21	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
929324.569350	CEgDY34sKGXvgCbb1	192.168.1.122	53224	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4dXwr29jYX0mtkA23,FrROYf3X0sSCXC1DM7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
929925.262782	CzdyLR3akk0mfsolel	192.168.1.122	53225	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fc1t9jMakiIa1U5Ae,FNK8Be25JKca51FrI1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
930246.759896	Cuk26HkctbtcsX2T2	192.168.1.122	53227	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXYPfJsMaiIoUJlPd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
930369.838062	C0sU8a3ZI6UioJ2fYl	192.168.1.122	53228	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1AqgFD5BYmAsvbG4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
930493.174003	Cnul09GiZJZpxLVzi	192.168.1.122	53229	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEHvAiJBAFJ9vhuB4,FGkbl53QxsT4P1np1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
931064.861284	Cn51gz4LNGYP6gz8Ja	192.168.1.122	53230	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6DBL04sqvDPJdkTbb,F7vp5UzDyL1UB0DWl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
931396.314443	Chj8p61o4IYs7TvRRj	192.168.1.122	53232	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQyBzX1Hi1T0QZ0mGa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
931570.373331	Cf3dom1gy9XqEq9XS	192.168.1.122	53233	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FItvvz4otljFTpJAT7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
931690.691027	CP3Ig43YKP5NekC9b1	192.168.1.122	53234	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzSk2z2Lvd8Vj9N9Me,FSsvy2MFo97DEZZue	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
932263.374494	CgsxcY2Pahs9pi6SP6	192.168.1.122	53235	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWIPsi4XgcxOEEKvUj,Fz1ssi3dvEQa86w00d	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
932555.846716	Crpxrb4EEofHCcWcF8	192.168.1.122	53237	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMXihcoFMjEGTYdzc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
932700.909367	CAGxX547XjatwaXUe6	192.168.1.122	53238	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrdbpJ2hMfrbonY0nk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
932846.232854	CxtQUI2HPHaa4pvWHj	192.168.1.122	53239	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyHQsm3owDmRkMOCgf,FFrSkE4do1VOBOAdIh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
933439.906771	CMClYMiAmHggUsuTi	192.168.1.122	53240	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyPVzv1bhEigxROBs7,Fg291YJWNcOCevAs3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
933777.367395	CvCy9MnAejC72idEf	192.168.1.122	53242	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fjx5FO1zeNBSaVXmrj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
933939.420284	CsTgGw1XCTY3ew0DA9	192.168.1.122	53243	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhqIbK2Lee3xaXYO39	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
934088.748893	C8c19X11ZK3RK4H553	192.168.1.122	53244	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fz5Xwk1dnFdlgT7bs,Fc6zRy1Oxun0X7BUF7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
934703.433050	CiwF4h2j439QnWo61e	192.168.1.122	53245	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGti1b27Sq7y04vtGk,Fy4FSL3YVA4RlNvd79	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
935033.916878	CPWfXG3mp17iUm8hG3	192.168.1.122	53247	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdJf524UrWu6i8Y1r1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
935200.977016	Cqjpe437D6oi2Agmr5	192.168.1.122	53248	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2cSnsTWVowK3GJOc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
935322.300006	CRpuK511dIch110gR7	192.168.1.122	53249	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUSDI6nDl7QpqTBeg,FaBzA410dZrBzqquUa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
935968.992475	Cmn0xU3O5pKHDhFcD8	192.168.1.122	53250	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7tQj12e4JyO6wQZb,FmozTAe6AMDPhPiV2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
936322.476073	Cop68zdfWfvhKY4dk	192.168.1.122	53252	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7mT6j4mzzuWVyLQmk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
936484.580316	CrHjtb33wIgGvlDktl	192.168.1.122	53253	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fcnjrx16Cwou2iHTL7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
936639.912382	Cv1Y5k2qDVHA367AHa	192.168.1.122	53254	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDZp5s2DdOBxAOHDLe,FI2Vj6kcDiyUIgtJa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
937256.593648	CR3iEb4QuYEjrJtFN8	192.168.1.122	53255	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUsdYu3HSfIGHk0dth,FkN4beANBqxa9D63i	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
937590.095705	CFYm4I2jkCoHEcvVCb	192.168.1.122	53257	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUu21I1PfPCeh8IVrj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
937738.191933	CuDXdP3QNKiZU0XDp6	192.168.1.122	53258	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRSiVf2zmUz9MraJbf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
937869.535154	CpjC8oFms2zXnQtSi	192.168.1.122	53259	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fv7kiw3VLRFML73cce,FshP3s3dt53o5twW2a	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
938460.234206	Cpr77F4zrInw3uhkn8	192.168.1.122	53260	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fy4jaS2ipIUlfC22I7,FHnyxq2saxPsummWKg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
938713.721047	CVWXht2mLtyecpY733	192.168.1.122	53262	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJkeydDIhrx1ykIcl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
938856.128907	CQHnJxVM7JBGn1Iva	192.168.1.122	53263	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FCqbyW18o37vNu657b	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
938982.475107	CrPfALZgZ9l1eop6b	192.168.1.122	53264	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDRbTQEHtfgCuuqD4,F8TztC4IAGL8pmI2nk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
939275.646073	CpgSwB3xQHxGtrQshg	192.168.1.122	53265	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyrRZa2W5Eswpusq73,FjIFfR1Yd0uPYsZZ8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
939899.591325	C9sRlC43EXjpUtTxJd	192.168.1.122	53267	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F16ryH2nLAzVvEXPj1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
940032.652503	CD9O9e3t84nnaHuuz	192.168.1.122	53268	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDUaks1YdICPOlic8j	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
940178.974977	CpYBVu2b33FTVmgvrk	192.168.1.122	53269	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaGwOx3szS6Ryjeqbf,FoDO054HbDwjxfhAug	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
940784.676950	CHVL9NtvTGjK2CE6e	192.168.1.122	53270	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7sHh7jibN3a5t9j,FUDNxq48j383JVumR8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
941122.163075	CRrVFE2DHV40a22A51	192.168.1.122	53272	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWcmZMGD65qCGcwLc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
941288.246006	C2tVtBNvHHftR68n2	192.168.1.122	53273	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FjddYI2Ll90u7p0JT4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
941438.566784	C9YuVm1EYGeN3nKdGb	192.168.1.122	53274	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEzWXm1PQkALqsKyy1,FNZQta1BlA1mh6dBU3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
942054.251675	CyHYb44AByZ8FnLlGj	192.168.1.122	53275	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSK3qo4ahqeDjrqbF1,FZOdlT2TTuRQVRZbT7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
942367.728488	CiRXZk1PlyBzeqBhde	192.168.1.122	53277	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnYT7G188iqG0gxlQ8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
942524.773883	CZMXIk2LlVaxv1mMy3	192.168.1.122	53278	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfdHOn2LOVK7bcDmO8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
942674.092925	CJkocw1Nw67RZVttak	192.168.1.122	53279	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgT02y31onJYWkBjvk,FFnUTd2SLK0a6s0vJ7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
943307.763769	CDLsfg2xXnSxUdmlv1	192.168.1.122	53280	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxaUwH24proTzJBKBi,F7KHJ3CT0AJQri7Ri	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
943607.226303	Chh0SZ3CuAceAOHK76	192.168.1.122	53282	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZJyQ33xWLesDuQWNc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
943761.388430	CbVqOV2Cs7YqRWiAUa	192.168.1.122	53283	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXXLBS1VH8YzvIr97a	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
943920.034076	CVnOxNcv99TP5eVzb	192.168.1.122	53284	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWDTFo4n1tZXtyVe69,FNCiVk4I9EopZt0HWe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
944504.714813	CZIELB3ApWnTbOWLA8	192.168.1.122	53285	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FymeX8lwAW2g8fiT2,FvxeRi1WSWvURq3Ktk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
944797.185775	CHFRiU1wDT1Eao2UU1	192.168.1.122	53287	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnhDI73HFP6ImgR0dd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
944922.260851	CGE4fgaC14CQcMaRg	192.168.1.122	53288	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBxBsF2LAO1oyjnkxj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
945074.584296	CvFh7G4VqzblJPkFIl	192.168.1.122	53289	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FitQ7EyBHUFlVO0v2,FlZFGp4PERnzuAX1Vd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
945671.272160	Ck2tpt44ZADU3o9nEc	192.168.1.122	53290	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fbhsh917CoEGQTcsVi,Fffbv91167dcF38oG8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
945992.738715	CM3jhy10ROF1qXIIn7	192.168.1.122	53292	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWny5n2MBoMrH1sXJe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
946142.785685	CyO4TH3IxeBMy2eP27	192.168.1.122	53293	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8apjh2navlnz8wvCk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
946318.141982	C2f3Fhb7Y6r3A3Pg9	192.168.1.122	53294	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBY6sg3tRvql02IHZe,FSpQCA21MQAK1rxmYg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
946969.819536	CprjT21cpq7IzwQtX7	192.168.1.122	53295	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFXKTs7KDSrOuO861,F0vale47FebcgJs8J7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
947231.273430	CM3Upf3gEm8cTs6uWd	192.168.1.122	53297	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3BYO64bq9szEXnFx9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
947358.323548	ChFLpc1qsV74xyCrS8	192.168.1.122	53298	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmBVno4GgRpyUVbnkg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
947490.657712	CDXfBz2lADZKjbKDM9	192.168.1.122	53299	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4wDcr1aoqCb3SjZdd,FLoTcP3YKPMrAisCgf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
948059.345614	CDlcix3e17JEKomi2g	192.168.1.122	53300	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWjZ8r2bMTzEDvMFEc,FIr66AwFPRNnoETbf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
948352.818447	CEccDE3WsxFyeDlncd	192.168.1.122	53302	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Flazvy4MtgZsX1Zri1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
948509.888663	CMRR2TNdBAoHODIva	192.168.1.122	53303	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOWWyM2Y32gG7ptBt2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
948669.212529	CuJdzq4vyYvcUNXcu9	192.168.1.122	53304	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5t17V3Z2PS5LW4Rgg,FjhLztLCxolwAsVZj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
948935.685671	C5v3K41XJFJ3Q8v3kd	192.168.1.122	53305	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fdhec34jZemIUbAfZg,FFLsX12vNJXivsFwe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
949245.198945	CDeig43QXnBWrvrCTa	192.168.1.122	53307	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FkggzD4MlgmypogiSa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
949401.489122	CeoiIe3KLuDDtltG7	192.168.1.122	53308	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxXPNG8H69wClhDR2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
949552.412198	CQUZdZNJEjORO8V9a	192.168.1.122	53309	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6hCHe1wJ2eRmvi6pa,FNp3dJmOkjwKilixf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
950205.100125	CD28Mm1MrFeM8r6vcb	192.168.1.122	53310	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ft1aGzFFQOqsLwa9a,FkX3nd2MndgrxC8MXd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
950506.625079	CVJpvB1xdgUy3u3Zv6	192.168.1.122	53312	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYs4T93bwStwSjeCQ9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
950663.705513	Cyvfrko5eRSRC9Vd6	192.168.1.122	53313	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FEKLMUpo4mauNfAIh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
950810.030652	CRk2Mw3ZKaFtvxVTc2	192.168.1.122	53314	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvWR3m3CnOEuXHFrv6,FBT1ji1Iwbhe8J4sUj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
951419.697174	C8oyOW2th5yimTRhwi	192.168.1.122	53315	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuTUmk3aB9L8Bt2fD2,F7OE2Y2qVpdIIMoKa7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
951751.151946	CRNlD23pNTE4l1qhOb	192.168.1.122	53317	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRsAxg1plJCrByiqvj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
951914.213888	CqZdd138eGrxRz6CW4	192.168.1.122	53318	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8HJzMu6mZsRf6JLg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
952055.541412	CqyQLv3GeSNL0g0MYa	192.168.1.122	53319	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FU54neCHLPym2Dm9,Fv0JR23K4YBHuhXKyb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
952702.210908	Cx4ElpoWpQBbFQM3a	192.168.1.122	53320	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPi7x41EXDbxlMpklh,FUJWqF3tgCwHTIzRi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
953042.718970	Cd9HaK7sOoh8yMBoj	192.168.1.122	53322	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FK5ojD2G3SgpXUqrJ1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
953219.821223	C0FzViRWnQUneUBqe	192.168.1.122	53323	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3xQ9r3s7CHvGrFq4k	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
953355.140248	ClqIjj1wGdwKMVau1j	192.168.1.122	53324	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4HUWU1UNlORdMd9fa,FjkjCUuU1HXd8DDT4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
953961.802729	CLTuDW2vhXmnoWqzH6	192.168.1.122	53325	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9yXTz2GLLNEC2mf8j,FJ6dCP3SwUgn8jaoj9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
954210.319646	C3OP982J3iWGq4y7Q4	192.168.1.122	53327	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmFOdNKi6Ae3Pu0c1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
954334.433620	CQ1saj4gkbIzlCu3v4	192.168.1.122	53328	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FISIPiptGqv93Zbd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
954458.756456	Cz0qbbl0an9ij4SM9	192.168.1.122	53329	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiXIyP3SB4jkyqRBWk,F8CEDP1aiDR83iJORh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
954748.934230	CddHqg1wMtCiRoGAz7	192.168.1.122	53330	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7SZzG48pBSTPWwa7c,F4Yaij4RM4zXBP46Fe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
955055.401786	CYCFJj3uIXChqtDvi8	192.168.1.122	53332	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FiT8Vl2mH9ERnNOMR1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
955205.455731	CFetsmLpzhaiMdfn	192.168.1.122	53333	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmcLj3UDn06HzYKFa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
955365.770588	CFrSgfLxY5if2iO2l	192.168.1.122	53334	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrLXQs12RR4lhVxZuh,F64xLs3DBrvYVULqV4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
955966.444118	CrXmLf3Ggqp9gbOXBd	192.168.1.122	53335	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2HZhNB7hqAfrJyEb,FxPIv6zasOIR3bpn	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
956253.926308	C754Qo14qqvVf6VvY9	192.168.1.122	53337	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FsCuEej0JwBsHvGxb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
956390.009539	Cuz8IN2xPRGTWHp4xe	192.168.1.122	53338	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOYbV115rnOtazF057	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
956539.377953	CZL8Bg2D0j10D4GEYb	192.168.1.122	53339	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fq1fEv9zkNYCcMGz2,FuTtXT1yLBqHidSIM1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
957127.043126	CFhCZl1joTcuGgdQqd	192.168.1.122	53340	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxAuqa2rldAKMxFUpb,Fv5ACd4D3A13TQHwKd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
957442.501227	CKWHoQ3KPCAwIitbS	192.168.1.122	53342	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fkr5CBxdzg47mAHZd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
957605.556864	CMvo2o4NjDB1KYD42j	192.168.1.122	53343	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fvz1pP13ew3RtsWsd3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
957755.876902	C8XdpT3M0kZqRTBkQ3	192.168.1.122	53344	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fk926L6tUqH0a6VTa,F23nDE4Zerv8N3JByd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
958105.048958	CooQi74QBSQr2ZchSf	192.168.1.122	53345	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3o6t73h854GE2Ij5a,FaDHYD1Av96OKj4Jmd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
958443.518116	CaaD8I2dhJgPGQMrLc	192.168.1.122	53347	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZWHQ439V2lLhsKJA2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
958608.589313	CXJSSs3MeqE4Ch5ER5	192.168.1.122	53348	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXFBWg4F4MUa9Dduxj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
958771.908157	CUXdaD3zDOZYjskpmd	192.168.1.122	53349	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGZzWw1e37sDGxjzqb,FGsB7B3Lk2KE1sA9Ik	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
959426.579304	C2M7QYmZXt88SL18b	192.168.1.122	53350	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxCVkH1s5AjknUkBp1,Fg3DBf4DclgYIKLlGj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
959764.045498	Ctixmg3zgA836GgsJf	192.168.1.122	53352	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FjuLYf3DmSq9VnX2Gj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
959908.098009	CGEdSe2ehXyTRGNw9h	192.168.1.122	53353	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKIgdG2UbdBM3fyyx7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
960086.438004	CglMfe2F9nN64fEDs3	192.168.1.122	53354	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	ForMEj247AOt6QFYC2,FIyJtD2GpRQ8IKjuh3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
960688.112919	CZdwcD1gWVtmedj8n6	192.168.1.122	53355	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuPYWC2W650jm56zSa,FZ3WMk3WTQDPVqDpY6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
960954.614684	C73hCW2FPbejzYhOwg	192.168.1.122	53357	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F90IfdsUkrPehZu1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
961131.716804	CWuLkVzmooCwgqm7b	192.168.1.122	53358	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKd97ezZMknpTd489	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
961280.034278	CxUCtaDjixZbyv4E1	192.168.1.122	53359	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAvJ9vYd6jyPCFONc,FsrJLG1qFhZPcUEWf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
961846.709076	C5Ryp53oCksxwdld8h	192.168.1.122	53360	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FI24UNfbwOv0ziSS9,FPO47o4Ez9zkQ2rGca	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
962143.170608	CyAPYt3P1sflACLWlf	192.168.1.122	53362	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fi1C5O1xjsgWHVUNql	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
962271.254702	C5XBFp1OKXONcsrCe	192.168.1.122	53363	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMXWNx41s90jE3IG67	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
962429.567035	CHZ3YrdX5oIAW4oO7	192.168.1.122	53364	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fzkt2k1xx9eC0Rfle4,FwosbK1vQqYwMJTepi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
962970.254204	CJ2Ik41ab0g1mdUlY	192.168.1.122	53365	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUsZ3d3SwkRM98xje2,FqR4Vf4q15cdan8ng9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
963315.750444	CiUmQb4CckxTu2jmUc	192.168.1.122	53367	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNoVmX1xeRPqyhxC5j	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
963453.845275	CbYeIs3hH21wUwcrCk	192.168.1.122	53368	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F97qVN1y9phkfQqLkg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
963625.165831	CviAx44ajZ1W3WUTm9	192.168.1.122	53369	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FS8VmN1U79LCg3MfPd,FYAosIGyvzrjwBCmi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
964266.838495	CBH8RV2f0aRf7kXV9g	192.168.1.122	53370	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6fqe83805UNqbH60h,FpX4op4DGVycUcW1Lj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
964536.301259	CGoLYV14NMXKJwQdq8	192.168.1.122	53372	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FK3nxUzaSjVIAYoq2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
964678.385838	Cvd72Z1QOjLRiRdYy3	192.168.1.122	53373	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FjyrVb3OszWWF0pUP1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
964810.710322	C8fWyl3pNjegyaRG4d	192.168.1.122	53374	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYyqLifwSDenNLuad,FYyXx43Zo3D4TENU99	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
965124.882918	C60QXv4wAdKnvjMwt	192.168.1.122	53375	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhwiRN1XVYVHZxdf11,Ft8KQJ2dA8sgV4qyz7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
965447.356503	CGsUEg4YxoV85I7ygc	192.168.1.122	53377	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKq8As3iCzx2pLP83	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
965620.440362	CmzhpA4K1AXe88tE4e	192.168.1.122	53378	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1OS1w3oT1da52YAx	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
965771.762132	CC89rD3PGLPcDK3Bq2	192.168.1.122	53379	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F41lfe2PjtxdbjLxl,Fmshm127tVUIjKJds8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
966369.441871	CoP2VS1xShSGTVEaV	192.168.1.122	53380	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fa3K2G1rNomHc2UZ2g,FVhPubGAPwa8iM0Ei	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
966668.896152	Cg1nJZ3f3O7wdcEh5h	192.168.1.122	53382	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlYdciT88sUP1Tu8i	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
966797.973448	CLPIvn4O9yL7W7l1E1	192.168.1.122	53383	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNBjPA3I9wzLXe3rRh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
966971.296835	Ca6IpxKLG8lcREFz8	192.168.1.122	53384	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FC9zMT3o9b9LtnhuY5,FoTNuB3SvWLkFDboX7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
967288.482066	CNRYsmxky8ZguSpB8	192.168.1.122	53385	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKKDxiqsVh3azLoc,FwY7SS1uREUhOKYXqd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
967550.989452	CZWnUF3wUNFUZLBG1h	192.168.1.122	53387	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqXOf22W5sZAr7teUc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
967676.095591	CeYHk395wDKnBCsfk	192.168.1.122	53388	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FiQv6E1dmvlt09UQs7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
967849.419673	CK142H5taXnsmfymj	192.168.1.122	53389	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ff2JwyPJEKQazH56k,FBfSDc4JOxHhdYFXya	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
968423.095397	CpTdPv3oRbfbqDfX1	192.168.1.122	53390	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbQd5Q3Nv4RKJE3P59,Fr3gjc2dGjPoSWEnA9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
968681.578504	CpM8ZU39RyOSoG4sH5	192.168.1.122	53392	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8d4mD1LtkcFwfIIGi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
968847.640471	CKohF8PLEbWJe0Odk	192.168.1.122	53393	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmlKDW2eKr1p1r21xi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
968978.953566	Cts8Hi3onpZs8c450i	192.168.1.122	53394	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTnw4T1tnOODIpFMsg,FNWJTf2noVZpBL6Yzh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
969592.625904	CPY57t20hEcvXbW2cb	192.168.1.122	53395	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVHcS13ABMSDviF1S6,Ft0mpW3a2RUCRGwpwg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
969893.128949	CeNryW2uVVVxbclrK5	192.168.1.122	53397	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fo2wof4Ie5Spm0BTq5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
970018.223091	Cwvpmafbfrq5o6qJ9	192.168.1.122	53398	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FessMi1UDI1o3XOmh3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
970174.542158	Cz3CNB4reWv8Y3Dzub	192.168.1.122	53399	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGvBun3J19h97fxahb,FNCcYU3m2QszH76v74	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
970766.233430	CfMVZg2z9PyMynZs66	192.168.1.122	53400	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGsK1Q1n4Cr5j9qLG6,FpvfcE4YVZTnYqxbNf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
971046.678266	C81zORhmuxz04dwv6	192.168.1.122	53402	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBc7cZ156aRvpNJL1f	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
971223.716791	CpJ6LsBdvfewpsoG3	192.168.1.122	53403	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNbgRi1MMYfCAe7lXl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
971391.031453	Caf1ut3U9cRV0fGFGi	192.168.1.122	53404	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcfkFX1r0gGrFhJ7k,FLZdhqSlj4TRq1Y95	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
971999.706516	CoKxOX1u62AUleVDpc	192.168.1.122	53405	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAT00L31owlc6s1rJl,FW4kN4BqAUR87MHdj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
972298.183954	CXewLe4oGe4YIe307g	192.168.1.122	53407	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrapvU11gG3W2Odpjk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
972471.249849	CMQ9Hu391hjnuYQEB3	192.168.1.122	53408	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwSgmp4eebzHdLsvNl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
972594.571041	CjKDNicxcZDAQCpol	192.168.1.122	53409	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fg0EpT1cDNInaAc5U9,Fk1tz14HetEeYhFtca	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
972852.052509	Cg66PJuWsQTLqCTKl	192.168.1.122	53410	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDt9qmwRkGyd94oog,FvT7by4MUJVzC93NQe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
973133.487411	COgL4c2I4O3EBAbbS5	192.168.1.122	53412	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBQCOx3xwbp98i7hf8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
973262.518147	C8Przx38tHy5ToqVpi	192.168.1.122	53413	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPyqNS1ZB2EOeX2nW8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
973384.838065	CuatIj41hQ1rr71KYc	192.168.1.122	53414	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fp1aVG3eMCZhKvYTF6,F06jyo6RDiwtFhsg3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
973970.521122	C7VSVz4sBrR9z7MC7c	192.168.1.122	53415	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0w9ES2gm7xuv8XV37,FAAFX91ZNYszQNaUNi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
974273.980409	Coi5K214wER3ATrn2f	192.168.1.122	53417	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1XZVo1l8lV7PmzcH1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
974441.042418	CJbphA3HYUkEsmry2	192.168.1.122	53418	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQIIOFf7VHNwZiPd7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
974567.358114	CKMosE4RNwNINEgRWb	192.168.1.122	53419	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLQVlP2DGkW7iZw5Oc,FEDifMGkGIw6vB9bf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
975220.037299	Cy1Fhq2qZIWsuZVA08	192.168.1.122	53420	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fn6nUQ3o18QSIrPD,F1LJzs32HyUlxov3l9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
975544.549549	CcGid03wpqsmQHtVi8	192.168.1.122	53422	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdUTQww1ksIHrnQmf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
975681.665980	CXzdyzYQnDZnlCUid	192.168.1.122	53423	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FoU0Y4OymgCAUDkWe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
975825.987706	CXqVWH2z2SmJG1dU17	192.168.1.122	53424	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeOD1AGAKmMKlYZv,Fu6lZVVbE0szMbaLb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
976453.671031	CKTo6c1Elrk6uHXYlk	192.168.1.122	53425	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fq9xWO32K67qxz3id3,FfKJeZBZw3nSjD718	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
976716.131919	CO9eza2XZauABoUkfl	192.168.1.122	53427	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwgwSM2dOESP8cZMV5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
976882.182199	CGL00U2ge89YH2Ud3	192.168.1.122	53428	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fw1LMatyXNWTVO7f	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
977027.505923	CKWxaJ1JzcOw7rI5j6	192.168.1.122	53429	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeaSxZ2T5PkUmIUhd2,FkgosC4fCQVr0GkHla	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
977657.170948	CBoEpR17dqkLeH1A33	192.168.1.122	53430	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgONJC44fd8XJVCoa7,FmHDFl3zEnrLODDtI	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
977980.654339	CI4G0pwPxcbp4G6fl	192.168.1.122	53432	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMTeU3nlHKWgj3Ynf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
978152.740715	CE7NV44ceheowrhG2k	192.168.1.122	53433	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWVj5T32jWAWwtR57a	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
978331.079572	CR272g3ciQwpqdZ5Je	192.168.1.122	53434	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxjZS110hFDmxZeL61,FRuZoBs5UgDZ3bGkj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
978580.257699	CDUJoN3yJBqxZy0u81	192.168.1.122	53435	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlDWO737k4Ao2F642f,FxZnhm1a5cIwsUYpC7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
978890.731806	CChRmea3nP4altLGg	192.168.1.122	53437	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPjQCl1LQD3bCvgxne	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
979059.823156	CmIqqW1QjD8JZiMrfj	192.168.1.122	53438	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlROlD9JByDLjRAF1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
979218.145365	CtX2gW3K8h7dCWu0zh	192.168.1.122	53439	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FM1Rze3lPy0Cplf1xc,F0sWHF282Rq30XgQ0d	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
979789.837857	CiOxFT11otQamR5B08	192.168.1.122	53440	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQMpu72r3bb7tPZlb2,FmymNr1UxvFxDJWIIi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
980069.296888	C35DbQ2mh161xp1Ojg	192.168.1.122	53442	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJyibE20qoJGqjcqua	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
980200.353006	CB0ot31RxAP6VqIfAh	192.168.1.122	53443	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Figvqu3FaV32XGNd68	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
980366.686481	CI8BK51s4RZgBTu5yh	192.168.1.122	53444	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fdl2PtMbVmoLvxP55,FTIf8B4CPaWsTD7FM2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
980700.856938	CJEhRx1cZd7zKsCnC7	192.168.1.122	53445	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlulvbUlPgE1cvEMi,F052kI197ADE95lWM7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
981015.323902	C7ljdy3ojNyt214315	192.168.1.122	53447	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FM4MnT1q3ih2H3cOj8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
981190.366441	CTq26e2R3bXOMnjl5h	192.168.1.122	53448	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fvx3QG1lMNSRrKmG34	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
981336.691248	C8obUR2vEb6LoeeTV6	192.168.1.122	53449	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCaiJ92ESucgXGYxU1,FPp6Vo2692F7S7hhEc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
981926.368193	CbGIQj3i4MH0oICVJe	192.168.1.122	53450	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsSSpD4olbzB9proZb,F3hPKv4FZAXUSCXNZh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
982195.833634	Cjq6jr40Br87ZJJ6b1	192.168.1.122	53452	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1pQlS3CrA7Oy1ogD6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
982321.892904	CekSoq3S7mbyqJOGjk	192.168.1.122	53453	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FAS5sh49DIXAUTCGMg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
982488.216629	C4lmhm3Gu66RICKo92	192.168.1.122	53454	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRr2wl3u6gELNfsYPc,FagNlW2ZQ3ZrRyo0Pk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
983128.908141	C2Z3zr24eauVCAlIKe	192.168.1.122	53455	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fc0suOOq1pftjbsYb,FzQJX83w839aUIX1Sc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
983415.395608	C5mSpPV5x4LjGlpPi	192.168.1.122	53457	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FjILEL3NZRiM8YqSf3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
983578.490685	C424bC2JzrZsHOHPN4	192.168.1.122	53458	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtBYc92Cc7Mi4IDoja	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
983730.823427	CVL3qF2xS2bI6zDLIh	192.168.1.122	53459	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXLPg8Mmy4k5Cglhe,F7iC9WCuhc0ZJAOx1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
984298.500755	C21GBp4UTZ3I1DN4E8	192.168.1.122	53460	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOrjMf4Oh8qpVj6uOc,FZRGE1re69ANHsQHi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
984598.980579	CCV1vT3wuJ7cHgtg8j	192.168.1.122	53462	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FR7OY22gjwJuGsfI1b	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
984739.048593	CCcjS24KFs977Fsc62	192.168.1.122	53463	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9k6Na4v2TsnNqG9ld	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
984859.365774	Cpb6hO30fPyAGzf076	192.168.1.122	53464	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlwVhAJbhWvC3TtD3,FPYsUE3ZU0wXxC4b3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
985117.817527	CoNxns47uu385oTMTg	192.168.1.122	53465	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FINj4d4HuRkZwnEkZg,FRBq6f4A6I1WWKen2i	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
985424.293078	CKkJFC4SSjDGwXdFS9	192.168.1.122	53467	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYVmHs18wDt3imKCPf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
985570.353498	C6ecxFN1sZ80ZMkM6	192.168.1.122	53468	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZCSdymABntnI6gQj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
985723.668953	CIMDn12YQ4GcbgIqX	192.168.1.122	53469	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fgof0l3te5BbBVSjKa,FdMIa43D4DlVBCIdJd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
986285.346796	CSh7503PxEU9ZaObU4	192.168.1.122	53470	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXNw3b3UVvoRyQdRq6,FdC11v1eSOczme6cO4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
986626.815727	Cn0TVT1SUdUredDXBi	192.168.1.122	53472	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHwmDx2xftkVGily58	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
986801.874465	CrjAQ34v9EIbxQcv4g	192.168.1.122	53473	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1IwTYpeLtIgSnp24	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
986969.189812	CtYOBID2VvRhpMQi1	192.168.1.122	53474	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTb0WS12v2yuiZKvDk,F6FbFvW2DSVfJAUq2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
987550.865660	C3DaEq4XF65TzxDTj	192.168.1.122	53475	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUkfZOLcp0PBaidjb,FF0ppg2TupaOfJIbff	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
987858.395483	C6VnQl3uMiCbolhTC	192.168.1.122	53477	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMuTor4snqGFrNyWCi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
988023.480677	CUBaZv1hvq7P4ZJKx7	192.168.1.122	53478	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIItb52SGwTPkt5Uqa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
988158.799749	C2Lf3aCKeXKl67IUb	192.168.1.122	53479	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPu7722lsC8PXbXUpl,F4CgEk2P6fNCdj5Kyi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
988475.965831	C3Qkei2pLh3LKZsXwa	192.168.1.122	53480	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FowBkY1PQJxBWPLF45,FU53ohhbwD1luLbDh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
988794.436932	CigAww4GeK4b3HjDo2	192.168.1.122	53482	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgeiH94SevlGc2puVa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
988952.487373	CEPHkf3fSfSjjNGlP1	192.168.1.122	53483	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHejjz90pLKhNRKa1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
989079.803983	CwXI4Veh1CGaRgwE9	192.168.1.122	53484	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyXB13bI5p2w7CqBg,F79QEz3B0RhVNDPZVi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
989696.480879	C5d2wLIMvqE8xvkU8	192.168.1.122	53485	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOj16T2oRgTX1qmGPa,FWVxlQ6v0IIvRCXc1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
990312.463372	CrltxBi4uYKmHni93	192.168.1.122	53487	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FSgwe4w81kARAAq9g	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
990489.537752	CPTiEc1SmfaxUzdT83	192.168.1.122	53488	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fq2SGm4Qz6wdKsZYf1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
990634.859354	CHlkxMaIE5ChAw8Le	192.168.1.122	53489	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfAm5h15rB2N6cjInf,FTTVVE4nJNehI7f4hd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
991180.524680	C8bDZD1Rq07MdzIjHc	192.168.1.122	53490	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYFBOR1XxOfB8FBaNk,FfZnjj3EcMvIcbcJR5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
991523.995004	CxRSsyd6PUZJNquce	192.168.1.122	53492	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmL8sH2fnlGlIlDGRk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
991690.062283	CUfH59NrbbzBpudJf	192.168.1.122	53493	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FsQqDG45CcQBjQN8x	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
991815.386929	CdvjWC18o7R5lu60Wd	192.168.1.122	53494	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqUkqQ2iq53TDLaVm8,FxH6s81T7t3X8xAA22	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
992389.071923	CDyC74dttQal3pOpk	192.168.1.122	53495	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmtCyW1mVv1NAr8bek,Fc8dwE2qLCISmZ1fcb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
992715.524776	C4KyWE3Ypm2mJV1LRc	192.168.1.122	53497	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbB8sg2Hy9UMfunzx3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
992848.598021	CmY5Jh1H7I3UnaAoN5	192.168.1.122	53498	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FkouaKPJnCvDco74d	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
993016.904676	C4IwAP2V9NIsRO6uJ4	192.168.1.122	53499	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJXALH1HR2sV0E05c6,F4UkAN2T98QwhVL8e2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
993274.084515	CFkPZeMQMCwsgf3Hh	192.168.1.122	53500	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3VicL2z1WDiL9cNtc,FmjK8B6bjj3lE7YHe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
993562.550832	CARnKL2lme32lr2Kz	192.168.1.122	53502	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FkRyx72PgUlpQgYTkh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
993717.598086	ClUcMx23SW8q63ue4h	192.168.1.122	53503	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FB57m33Tl1s0Q5B2kd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
993837.915605	C1FFFc3MOmjKekvuka	192.168.1.122	53504	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Foj42C1G4BnsJG9RN,FB1AHm2nt3MqTpkXA1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
994443.596583	Ce8ef52mMEeytXoG72	192.168.1.122	53505	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHOiyNcdoa4t8eg3a,FKTh9c2pXgsiizDkA3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
994741.072475	CShRDd40BO4HiF56V2	192.168.1.122	53507	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVmTav2qQmKfIVoNl4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
994906.146478	CpQX5q3yEN5fjZHXOb	192.168.1.122	53508	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fv16rX2QE5MJJZLMdg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
995062.485732	CXixG416ey5jjpqDd9	192.168.1.122	53509	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3550y1E4hA5tnoAxb,FAvLtx1satjEtksdx7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
995694.164067	CrlKzsSlwjZq4ARCe	192.168.1.122	53510	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqdkQa3hX0MnNZqeM2,FNxyoV5yty8luIdGi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
996000.610212	C1XtKMV4kv0C1Usx6	192.168.1.122	53512	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJPyj81qMJxbey1nH	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
996158.647513	CGmBxd20GZykCej4bh	192.168.1.122	53513	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrEjgJT0Ohb1vwgdd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
996317.970613	CboYRR1rNF5GmYbY48	192.168.1.122	53514	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnkcLz34kuL9iczdNl,FJEkD52LfNZKL70Z4c	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
996873.650551	CShh5szUeAaFD9d07	192.168.1.122	53515	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fd16Yy4gloZHe7D6ob,FZFaWg4QNyAvHoSN29	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
997189.107753	C9iGA43G1M5BHK9XS2	192.168.1.122	53517	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXdZOm2oUlEf1ykgG1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
997359.163371	Cb71GkWdRULMlMPD5	192.168.1.122	53518	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1ibfF27AyqV9bnRhc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
997483.486405	CtAsUb2X7FaN4OpxCe	192.168.1.122	53519	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJFs1D3puVMMkxG0jh,FivTOE3cieyy9rKLu7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
998056.170049	CkI0yb1r3eP88arNGd	192.168.1.122	53520	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmcQTXNWOovfZjuU2,FjhEbSbQ1MSwRztd2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
998384.638278	CZg1742KY4arSkYDd5	192.168.1.122	53522	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHWGrI1TX9MK6MAnce	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
998540.732043	CD42Of3af2fhrN5ZDi	192.168.1.122	53523	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fia7581hXe9Atcl4Mb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
998671.054054	CTAnXt4fmkSdMUW7X7	192.168.1.122	53524	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FY7Hzb4nY0wGeRoa56,F1o5RJ12qaYr22HM5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
999309.722268	CInd9D3EaDtEfz66B2	192.168.1.122	53525	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9ZGDD4KM0vwmgEYtc,FKWteF4OTjS28QH0w9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
999595.212866	CtnRnt4NBXMDD628Yg	192.168.1.122	53527	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGxkxx1Z68c8fdRvJ4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
999735.319838	CGdq7449qWCbfsz3Ci	192.168.1.122	53528	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FoBpHrh2mC15Uv6H	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
999883.637345	Cbgo661P6s3PHdcWsg	192.168.1.122	53529	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUjZVT1hQMwryqoqJ8,FRInF249OJBFossrPl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1000123.822717	CZzGGVnwlHsOLFNS8	192.168.1.122	53530	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7B3su1EMGmGsshAT9,FYbDB5Ryrj4Ld5WQ	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1000399.320969	C68AwB34g7ZHiXqZml	192.168.1.122	53532	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5Rgp32Dq9wgKkJrE6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1000528.668626	CytJyo34xmXbHB15R3	192.168.1.122	53533	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHrBEY1xFrE0Mxotd1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1000687.282784	CmyMHbywqd8kfGZBc	192.168.1.122	53534	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fdn7Vb4aGba6UC0sm,FT1Hn11oLnLyzZ8abd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1001259.957047	CXoGoK6AnhFgj17k7	192.168.1.122	53535	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjoacR3b7hu9jIaDGl,FPfAxt3kYftwFTlp32	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1001519.410979	C7PALV2wgE4O76wOMd	192.168.1.122	53537	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FndVr44eEc8G7UPjch	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1001665.435324	C4RwyuKuCtWHfYWDc	192.168.1.122	53538	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWQza2U3rFtYAB0D5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1001815.755362	COQ8PD3wVMqoGJd5Eb	192.168.1.122	53539	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fi5qGq3Futa5UDNFKb,FcPpNl2NZGXgSFleIc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1002431.440876	C2AzMh3fUXHXDQYmp6	192.168.1.122	53540	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtPZbv4top24C0CQUg,FeCy7qD7sb8zyryM8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1002733.897785	C15D1G48oD7HIho34k	192.168.1.122	53542	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBAdK24DnEDyKO6Di4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1002901.953143	CDGjQQGXmnejKkjf8	192.168.1.122	53543	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMMnNNdTuzXnyL3A5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1003065.272808	CBXFKu3KkI9ezNUhE3	192.168.1.122	53544	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ft4ii93u4obWz5rwv5,FL32Fr4bfjXqQEhYQ6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1003646.938614	CvxGIRNBE2yWCwMLl	192.168.1.122	53545	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FF8nwq3KOoMsi1zi7e,F5L4gf4sPxLfKmfQAh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1003961.408288	CzhTcb34eKEmYpRFXb	192.168.1.122	53547	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FtVrPt80CX5PnNhM8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1004087.478329	CgY98woUpJ0BjyWij	192.168.1.122	53548	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQd98Q3Txj3wqa8E53	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1004211.800190	CGqbEa2tYPmoZbz9s	192.168.1.122	53549	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FymRtB3GHGw8qj9Nch,F015lX36fDffHRdj5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1004816.481276	CFGA3a28ctwtD5oKD6	192.168.1.122	53550	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9m0W532Rn5yyMBT3k,F7M2Pl3ChWamIli5P8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1005096.975459	CAKYspfo7qDe1Fbd4	192.168.1.122	53552	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Frd6VceMTxFlnFD8f	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1005249.057475	C1cs9XMq9NA31avY6	192.168.1.122	53553	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSk3pr2MwV4zkFaZ4l	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1005422.381271	C0A4EB35uecUY6EfRf	192.168.1.122	53554	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWjydU3YyL1GupseR,F2qQ8o3eJklNbqBLhi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1005738.856024	CjCcEPIYEKqXiWjXc	192.168.1.122	53555	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FS76fpGMwIPxu0ura,FTbxgS291BOiApbrw6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1006030.286372	CEt8UV3wkSA0UK4Ggh	192.168.1.122	53557	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FE9ZymX60BRDCJoK1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1006183.320904	C0P7ke1nlAnm1uAmZ2	192.168.1.122	53558	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNUgz146aypbnEw966	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1006315.645137	CmzTqcDPINAlNfZyi	192.168.1.122	53559	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FF8wfs20G51n4ICdPi,FwdknHgnPFeS5w9Nk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1006893.315716	CUZE4Cp4cwW2F12Ef	192.168.1.122	53560	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fa2bsI2a0eNWjPRuma,FYp2gHlG06o43faef	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1007224.762875	C1oOg411tWutSitDej	192.168.1.122	53562	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBbNDm2FVOdGD5eNc5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1007392.809839	CYDHqm1zTPDIxsOzle	192.168.1.122	53563	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKcpFo09icydKYt97	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1007564.130580	CpL4oJ3YebGypwbVRj	192.168.1.122	53564	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlEzDK376JzmWf1mid,FpFGjY1gyW9KBErRv4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1008152.807008	CdvRXIT3TnbMun4I2	192.168.1.122	53565	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fo3leB2sWBK5XuK1i1,FIVFe8JKFmmcpQhzh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1008440.293376	CQ8DJ14shvTDL0eZ29	192.168.1.122	53567	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4jRrC2Hm3SlznFcbk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1008564.354003	CfUAL44r9BSv5lNj1	192.168.1.122	53568	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FvV826AGtv5gxTRvg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1008715.675954	C9c2KdM2yAiZkhis1	192.168.1.122	53569	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9Ssd43gwjteXyWyzh,FjO96QfkIyXXWflek	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1009339.373252	CbYQvn33vVkIjtpZz7	192.168.1.122	53570	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9424Q3isn9FtWpGC3,FLZprm3JqfhNtRfU3b	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1009691.859766	CEzdEF3lAPUaEEFmS6	192.168.1.122	53572	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3w0Vg211UE449S2oi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1009833.949240	Code6aKoXbOHVwIub	192.168.1.122	53573	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FnqhYl1FbvfMDU5qJi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1010004.268879	CkSwxs2CKepfemrEoj	192.168.1.122	53574	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fr1wdH1FHoe1cqTaol,FtjluD4hLHX3UyQ4N6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1010555.942097	CXbTHm2hTnhAQnHhkj	192.168.1.122	53575	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjCo1j1ILVLASPJKl2,Fh5oFYGlzQ3zB2dJ9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1010884.400927	CYokLc2Kg3z8kTROmh	192.168.1.122	53577	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fn6iWt1ZAGiqDB8Kc2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1011032.454302	CB2Jgu38QFiwPrNVQ7	192.168.1.122	53578	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMaDSV1SbuyPTPQ8F9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1011199.767307	CGNrQ01MzltAOoln2a	192.168.1.122	53579	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fg9QnF3cfP6JrBksP7,FYSZSulRjkdMkMyF2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1011838.446734	CoorMWkmQdtvWzzZg	192.168.1.122	53580	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcPhOI2Bp4LeqtU9j7,F9SWA32WEQ1oypiRhj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1012108.927306	CP6a0f4mHQiTEtLl41	192.168.1.122	53582	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3okNBAh6rHTg8TT9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1012245.997293	CoDGSZ1rbkCR8UfdMk	192.168.1.122	53583	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGaRpE4Grl92rMs4wk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1012412.320661	C0pvoW2O4t1KFHf4Hc	192.168.1.122	53584	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F75ueT1KRAd01Yfqg4,F5vczu2sUohb1xLhsj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1013012.013050	Ccil0a1G6TwtGjEA98	192.168.1.122	53585	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPINvc43v2zFrMZh8j,FRTAKz1KH3GRcwTvq	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1013292.491018	CjmOLw3MPrU0MqKUN	192.168.1.122	53587	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnQjnj11e88Nl8JZr4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1013466.572495	CroVE144JcEA1gaKdb	192.168.1.122	53588	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FiHXRLJAIwBxiO1Oi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1013634.888669	CQbbAr3KV8aqg4MeJ2	192.168.1.122	53589	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fp6aJbSjAoPVbRcnf,FbsBNA14eWRtUy4oBf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1014177.569082	CcHNe23VKDoc02X16g	192.168.1.122	53590	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FB3eTB1OhxgfGa5aV2,F3KUgm1TYDGy8NK1Hc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1014524.042735	CjDIrV1Hu594gQsRZ8	192.168.1.122	53592	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbjKY73chAHghskxX9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1014671.134558	CVg6wr21AhpwBKpMDh	192.168.1.122	53593	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FITF8hufRepPEmoNd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1014814.454458	ClXd6x316DmUk69Msb	192.168.1.122	53594	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBc6Zi2JFHPfErODK5,FriF9L2xc6szIo858f	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1015434.146303	Cl7Z953KWL3sGUz9F1	192.168.1.122	53595	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiyENt1W595SFXDwbf,Fb9C2S3tiK1HSisvWf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1015728.627311	CNJZzAA8NcCgji218	192.168.1.122	53597	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F92OiFgA8ipjbgJf3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1015873.704043	CRAJGm11YYeAfPuoGc	192.168.1.122	53598	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FD6pIxup1pAv6gm96	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1016049.019669	CuIvSmp07ca5cjvA9	192.168.1.122	53599	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F71yIx4LkaM2DKHIUk,FkA8qE1UG3erckg3nl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1016633.701095	CJfzRo4W2rSLHGeq1c	192.168.1.122	53600	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVOJlRBgnui5xRmu6,FZ0w9u13yaySormjdc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1016911.192826	Cu6Iu010ErCPAt3bUb	192.168.1.122	53602	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FH0hvMQ2zNN3Dd2oe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1017062.282772	C7P4wN2r6jfcS0xJr6	192.168.1.122	53603	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2lv7w4xQuPxGsULhl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1017222.597408	CO4XLc4CQyPnDkVcAk	192.168.1.122	53604	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFbNZeDdQ6md3i7lh,FhsPF02QauxgKIlJ1f	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1017543.789142	C2y5gC2H8BWiTbrUn9	192.168.1.122	53605	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3bTOb2sc50ShNerm5,FsZ2B63pB2xySUxltk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1017867.293799	CRrhcKv52uQ2qIkG7	192.168.1.122	53607	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDUxhQ2OnCFH24AlBc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1018007.401392	CiFZ0q49mzjWBnqERc	192.168.1.122	53608	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGOGAq2xK3SKDSwfJj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1018137.722436	C6ceGs28tThwhE11d3	192.168.1.122	53609	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMO8kI1PKK1lOixQEi,FTNSG1FfDEQjRmWqa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1018683.387157	CMVOga2TfHShDUT7q6	192.168.1.122	53610	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmRWg42w9uGnklb7Fg,Fg9VdL3xJre7kqeDT5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1018962.868369	CFF8m93JWHmhsnkZpl	192.168.1.122	53612	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGFCRgNqW89D8jzB	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1019124.957936	Cdcsql4pN6HpIB2jih	192.168.1.122	53613	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FFdPXp4PadnWs41k83	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1019298.281323	CTarB73IyfXutw9vI6	192.168.1.122	53614	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHd0Sf1HPyYvZuv7Jb,FdyW1x3PrPFidnNoK6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1019840.972054	CR1pm1YyVulpqitjb	192.168.1.122	53615	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fr1XW2ge7Wo2E5PX6,FlY8R71Ra70oPcDyoh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1020116.432119	CiC9124WOe33Mm2Mc3	192.168.1.122	53617	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAqboX2AA0nVWg9NZ7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1020252.499095	CKb6O929rfdnVvbFGf	192.168.1.122	53618	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Ffumkj4WqiKBYTvseg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1020411.822180	C78Peu29vmYuPuGECc	192.168.1.122	53619	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGh7g22Q6v38wMMjyb,FOXTWq3uxLT48gdOaf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1021000.498885	C1MpKwLkmS5i9eSSf	192.168.1.122	53620	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFpkgj44SSGmnug4B5,FFj1yf1PTNr1Gkwun	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1021324.995141	Cd3ljFQyeAeqzUzj8	192.168.1.122	53622	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FT89hO27uksY2Ro20a	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1021500.103125	C0oPVo9azGRNPC8L9	192.168.1.122	53623	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9ypVG1upVffXl4wrf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1021669.420483	Cr55Id1mHNf3BL5fLf	192.168.1.122	53624	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPA9Ol3USYZMY08s0j,FYaoUH3Td76gwcssv3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1022004.582771	CJqVto4c5k7NH6ZOsg	192.168.1.122	53625	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoanoCk7O13qMkF69,FqVyxz4DxFhcgQQfrd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1022305.075793	CqVhgQ16yMkaspYqWk	192.168.1.122	53627	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTwJYk4QECyKB9IYCd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1022481.173351	CXnQ0M346prXyWLrL1	192.168.1.122	53628	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fajb8dtm4HImYBCBc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1022609.502600	CWPtVJ7CXFZXhjhqb	192.168.1.122	53629	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3tH2e1heqtPpKsdnd,Fh680b3a695grFi9e1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1023209.184757	CzGLYk1aEmqSzEpA2i	192.168.1.122	53630	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGfMb13DpDVtQthcxb,FQRhzj4L3Do7YGZuq3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1023512.655008	C7Vla53oJHZQ5QxUU6	192.168.1.122	53632	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8CGQ2bAyZa73J3Aa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1023666.747723	C8CdAl4g2ZS8DawxYh	192.168.1.122	53633	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FleL6l2Qj0ITtAWD4j	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1023837.056942	Ci2xjz1jMW27nziRr3	192.168.1.122	53634	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFfdwD2cbEOhkl6Ti,FjmsoOgdrhqMC2zFh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1024393.737464	CQkEsZvEqghdUSXle	192.168.1.122	53635	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fui2XP198iU0mufQcg,FofQDl2uEYnpSdW0l9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1024709.204465	Cl2p3b268PZtSt2sm6	192.168.1.122	53637	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FO2MaN1KS3X1wV4tm2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1024842.280678	Ciji3F1VkHeATa7njd	192.168.1.122	53638	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRwPLx1ImEe3jzydxg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1024988.602625	C3MnH42TLUfGcafBVa	192.168.1.122	53639	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fe9vFn4egRK9N7Ukh3,FSQcKS23k6TjiyQcEa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1025534.267694	Cof0U32OfkVgdG3R3h	192.168.1.122	53640	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJ8oYo2lu3HKn7oUr9,FG9YvI22KID7ERDQc4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1025837.736256	CaScpS1xy3Ni40rhl	192.168.1.122	53642	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FEYEzKZoJn49Ee8c7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1025965.813696	Ck84rY1JkM6CT85Vo9	192.168.1.122	53643	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBOvBO1nE53pFH1x1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1026115.132892	CLnmCP1GSWl9apUMNi	192.168.1.122	53644	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2InC72hfCARDOdoG5,FHwSTs3K2IC1YQWNTj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1026709.797754	Co7zTvG76P0omlkHl	192.168.1.122	53645	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F82LeF387KMt8K74Te,F76wLP16IklWzKtP76	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1026996.269138	Cfrysk1RrA5cLK4jri	192.168.1.122	53647	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwQ0awJL51PJ65Nx6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1027117.339222	CbnogY3KUHPJ086pnb	192.168.1.122	53648	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FvfTpp2QDoyVaxVA47	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1027250.655108	CjdhYH1SQKMoSBOfSe	192.168.1.122	53649	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwKHcN20cKiiS5Gnte,FQ9Njn1fsUAk2JQM5i	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1027819.322641	C5Tbgv3isFoa3iX7f8	192.168.1.122	53650	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHR5Cw1b1R3zcOe598,F6vBraCw8szvOZilj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1028084.796439	C7rhhK28AaJ3Sc7mj6	192.168.1.122	53652	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FH1UqX1uPhloqPrMH1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1028251.860746	CnH0rzGegbkl7md0c	192.168.1.122	53653	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FEHwMN1euRgLIX2bme	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1028414.178138	CiwY3A3XhcdA6uLknh	192.168.1.122	53654	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FERyxP1LLtXLY7AsQh,FXb00t2U1AiGjD8BC8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1028662.354759	CmykuA3QfZaa6xqh62	192.168.1.122	53655	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4U76G4DVkVebIK1F5,FzpruA1zfmbN8IrJ79	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1028928.831662	CZpzh44n3EpkeP2b54	192.168.1.122	53657	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F14ZRlkFSN0XEnOai	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1029106.879767	CZJ1Qf3gboUrqqc2v	192.168.1.122	53658	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5wsje1KHbMo36ATt2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1029276.197319	CIFimm3jL5aqNwd4uf	192.168.1.122	53659	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fn1o5N1FeM0QMrI95f,Fn2NNB1ZDv8HKICfXl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1029861.880175	C21gp1eOj0FH2SCAe	192.168.1.122	53660	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fo2jzD1nkPPRfdEwDd,FKS6Il1zHUTZk9Yctf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1030201.363285	Cm4gAT1heFHT9XuXwb	192.168.1.122	53662	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwbdfV1trcG1UZuhsa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1030344.459236	CIjtBQ1lKRA4zZUw76	192.168.1.122	53663	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fs13cB1uziRYT7MPu8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1030508.779553	CyFgrZ1Vuw8WpasLLf	192.168.1.122	53664	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJ4tiA1RHC5DhqIvD1,FNb4eE1LDeGouAi72	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1031143.453441	Cd7FwQ1hVYYHAP52Qj	192.168.1.122	53665	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FE9sANphlgPfGWM9f,Fh7IAG4hBY5o3d5Oef	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1031444.928218	CnxKmE2UGJKSXe5Dx6	192.168.1.122	53667	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6O7A02V7ljkA3NhG3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1031615.008689	CqF2uj31XqRtGN0HO3	192.168.1.122	53668	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrjshRj3HeTgH38md	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1031759.337796	CD2Y4T1m8HRc0x4y6f	192.168.1.122	53669	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeLzNe2PA87wHKMgZ6,Fqfzot2mK0VrjGqnG1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1032403.013657	CLB7Eiw1A1Y4tBNUj	192.168.1.122	53670	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYWdML2AwywuoNfSzi,FffmHQ1BV1vLPEMvui	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1032716.516380	Ck7Toq1fETsAHsPe8d	192.168.1.122	53672	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FG5KYc2kNHl5Sjgymj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1032876.590271	CzWoMr18sa6cRUTjRd	192.168.1.122	53673	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FecIe43VLsK1cTz4jk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1033036.904992	CcZfrg1Zkn5A3o0L33	192.168.1.122	53674	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAYob7147PMTi6HcY8,FUJJHk2v70UCtOw6Yg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1033645.580236	Cn33oE3A7kgv8S2vCh	192.168.1.122	53675	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiMid53fbxRAEl9V76,FrJ0FT10BtDOnOdqc6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1033966.067745	CqiIiA3vLZgFtuUEck	192.168.1.122	53677	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlDc4SXeIWW6rKrol	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1034144.552772	CjKkP14M7snpgWJz8e	192.168.1.122	53678	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Ft9FoyZ4FN95Envbj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1034289.875923	CY34X72MigLKStKN9f	192.168.1.122	53679	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FM0EBHSdd4FHS1phd,FHWQtx4OPawqB2g9L1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1034855.548527	CDmaoD3T3Xma1AyJqg	192.168.1.122	53680	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F51Bmb4VxF7AdaanU6,FOddbO1HIxjIHEK449	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1035406.523319	CCvFF1upqDM8TNR21	192.168.1.122	53682	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FiShtQkeZkwKTQEdh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1035552.619444	CfusdET9mqeKGf6p1	192.168.1.122	53683	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FkDA1c3S3q3LyeX6ka	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1035705.930855	CkukLA39FONHrjcGLl	192.168.1.122	53684	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZctSt9TPFfsCo6ag,FQqrf947OD04ljPhBl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1036365.600439	CI348Q19gFMVXhUER5	192.168.1.122	53685	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0aBW72aHBP6Cymwmg,F4s8Ms3QCq4Hs3OpS2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1036661.073504	CmsVJz1PVdPdIdxXkk	192.168.1.122	53687	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fqjmg8gcgixXQhXJ9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1036817.148277	CqAYMcGpTj8PrKhOk	192.168.1.122	53688	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FoyQz64pcQAyO4PCIj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1036979.512883	C1WUhp1xox65qU8W28	192.168.1.122	53689	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9SV1WcpG9iXYilRc,FpqhEb3VCcGDGrATil	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1037527.190607	CCsza61gL3wtkWRmb	192.168.1.122	53690	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjYMTr1J6YHJwOPh0g,FlsdgTDB2LaDEJ1Pg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1037796.662184	Cpb2UK33o38rqatYxi	192.168.1.122	53692	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F78V9X2zpypHVw0Tae	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1037964.745072	C47uRn4EO0HG8lgc6e	192.168.1.122	53693	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0hinZ3YhJpKv1IRy7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1038099.062579	CjiVVl3wgiUMzPqLq2	192.168.1.122	53694	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5OC183kMGIGVZ0Ux2,FjK8Z92ZTGPj5PN973	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1038689.733303	Cro7Io10DkQuyZOQd6	192.168.1.122	53695	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwXEARKjXAo2VKBui,FWmuFR3DFh2ABVhrK1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1038982.186015	CgE0dX3b2pyLZW6zv9	192.168.1.122	53697	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLUost1HsUcl6cjdhb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1039112.224689	CtIFMG2XAueR84MHa1	192.168.1.122	53698	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FyIeR12aNw7UEkxLF7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1039247.544168	C7tN2u3k3FxXz4hLKi	192.168.1.122	53699	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjPvXK3tPLuh9kbFsf,F0WYRD9HQS3cUc7Dg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1039892.210987	C51lzI1Fe9YtZeG4M5	192.168.1.122	53700	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ft2piG3XoXajCegdi3,Fja5103chSZ0xQni0e	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1040190.715307	C4luOVjAcDpV1J3sb	192.168.1.122	53702	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmRrCYFwHaowqXEi5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1040314.814045	CnuHs53tpMp7VOtaph	192.168.1.122	53703	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNOGZ21Eaz4aQRF3oe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1040454.139229	CPsz7M43J5vfdUnM7	192.168.1.122	53704	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FptJID3VfuLJBfhgbb,FdqePj4MsJRyRUCDQ2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1041030.807989	C3s9QPOCukWvEOLsk	192.168.1.122	53705	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlqPNW3prLqsI8wkYl,F6v7ki2bMceGqBY0Wd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1041367.311133	C3GxC84XtDPRPsRVOc	192.168.1.122	53707	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6H2hb205sxQhdA7K8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1041502.422036	CJ3TOY1deOoCaHKKr8	192.168.1.122	53708	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQfZeU21oFcwtpzJT1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1041628.737536	CBejpw1xCA7ebkppVk	192.168.1.122	53709	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FR79T22V1jmQJOM866,Ferhi52xMwhxTo9pCg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1042192.408129	CLPhS4glKYKwAA1Jg	192.168.1.122	53710	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FghtMC3CPPRCZIYJ0f,Fr0Dlx19Ao6HpUtWr9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1042504.873652	CCeG2k2T832UKmHqK2	192.168.1.122	53712	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJhGSy4a2oHNv41Cxh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1042667.947292	CHW42c2eQrP2JUW0Kj	192.168.1.122	53713	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FTdPU43uVhdYUDgSxe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1042812.269576	CKZx1m3HNQJr5d6ap4	192.168.1.122	53714	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzbB073kKYDlxKfNBi,Fuom4037qhkyrnWRk9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1043449.946674	CDLbUd2xzoUhX5fsD7	192.168.1.122	53715	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkzJnr2OhLkG5pT0ik,FRqCEf1c1mEPr5ybti	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1043733.375189	CrtpW42k8jiEVbZ9ld	192.168.1.122	53717	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPIffU3Lij0hNGkbP3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1043860.402952	CZLZaN3rtwbXYEt8d5	192.168.1.122	53718	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6O93s4ArQjfOsSMuj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1044004.724406	Cxj2mkrCGQsdMThxk	192.168.1.122	53719	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUeiz03I7NEBTGo1g2,FLRDX22x0LaBE75yil	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1044549.397042	CjwsJMfMzRYw5QlQg	192.168.1.122	53720	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1G8ZR1XISV3XKd0ud,FBONaQY0mt8ubCB65	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1044853.892466	CC40Ff1xIp3wDUj14f	192.168.1.122	53722	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F11nBJSntF4NYXhL3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1045027.990939	CCmktoOcC4gemXxol	192.168.1.122	53723	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fhj3Ey246DlVPXC9X8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1045202.305672	C4hPDIukUqJY79bl8	192.168.1.122	53724	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fug7iu2PPVjnbMYPD1,FEalOb3ZCUoYzNcMQd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1045744.985829	CDlN014xtj5SSJo5bc	192.168.1.122	53725	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fbcec6i8TtvDsbGWc,Fpaxtt2nKgo0Bjy635	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1046032.482820	CQZfbFlHHdB1RLRO	192.168.1.122	53727	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FxZ5Sk4GtmEGmCZbZ6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1046192.565113	CFvq8e1pebTF6PKV9b	192.168.1.122	53728	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQKpgi10SqzJB3Ble8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1046312.882107	C9k9WX3f2iaP4cWaol	192.168.1.122	53729	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F783U32mjbJNCmYIP,FOpGDL3zHDblBgE1zj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1046570.062369	CqwsKe31Ao36CZHLl1	192.168.1.122	53730	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMxBj9p47FjiDUKS4,FYTAmf1Zb0lBs3Xkbf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1046870.532962	C2YduB2D3MlZ0G6lvb	192.168.1.122	53732	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzQPwh3WuSK5e60Si4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1047025.593309	CdU8Cy3BLUBaFpxnub	192.168.1.122	53733	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXhwCY1PCYJhnqZ0f3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1047182.913236	CcQNey1aQJNNAflpgj	192.168.1.122	53734	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpN0p24U3xukdeEZF7,FtmLvDnmOLIbvDMua	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1047476.085247	CA7Buc1ku8oiOFmZ5j	192.168.1.122	53735	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrEtJjAXRGdMCMEXc,FgW7ZD4tLuTFN6HQJ5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1047805.575752	CbNDit26b50gzEBet7	192.168.1.122	53737	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fol6GGOIkH3vOb1Eb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1047938.675383	CygNNU14nPHGr1dm5a	192.168.1.122	53738	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fhg2nz2HtMdG2qrSBk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1048093.993107	C2o5bKfP7VPI32GVk	192.168.1.122	53739	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIIWrQ2Kvb3cHfqfHf,FWTxbC34nxp10zpMi1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1048338.464703	CbqPcZ33wrz9tLKJOc	192.168.1.122	53740	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNaGuQ2gkiCXX16HY7,FQT8kV39dMm2u6tj83	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1048619.924819	CBiJlBlfppSn7oJy7	192.168.1.122	53742	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVbcUn269hG7vzb9r8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1048762.970725	CfyUkM31U6a88C57qi	192.168.1.122	53743	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlBEwnw1tH5CTW11b	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1048905.290056	C3pzPd3bu4eNmNtd61	192.168.1.122	53744	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FihaPC3NA5RPG1ZkDc,FvYgAm2D3cSaDoYuoe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1049260.461295	CAwjoc1ma4qmKZH0M5	192.168.1.122	53745	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmW5Hb4q3eqyPNTnHd,FxafPm4NC9Rn4dZNhe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1049564.945856	C69aOb2k6dwb8RKEla	192.168.1.122	53747	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmaS6q4BjU3W6ov0od	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1049745.053965	C11oHJ2ceO0kWp0jt5	192.168.1.122	53748	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfxNIQhrhOIeTn1N3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1049888.381840	C0vfnX2XUQXtZdUgc5	192.168.1.122	53749	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FC1WMu2kFWqeqKO3kk,F4HOy83omZGDBl4qsj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1050129.560208	CKxXFF4btFoumtEoLj	192.168.1.122	53750	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQNdU04M9w79HHy0t4,FXzswdf5rgt4NJvaf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1050388.033524	CLzXNO1B8R6yV4m193	192.168.1.122	53752	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FiMaTV2pjhtK6W2nc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1050523.111385	CLDTsCn6rFL27Yfoe	192.168.1.122	53753	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5viVa1jTi7YBiok1f	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1050647.434497	C8YEH1JBeCJ1y0RVi	192.168.1.122	53754	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsYukE4u8MYbaLT1yg,FCBuWT3qOzMB5Wuqb9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1051005.920197	CdUJ2x1zVnX2BjzIS9	192.168.1.122	53755	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvOqZG3n6fnlaxEYjf,F5bmhc4hS0ofB9SVLe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1051331.391520	CnK5qz3vV5WSo3kb3l	192.168.1.122	53757	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FiXjpU3wgp3sBFKSp6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1051469.462750	CVypix4O0tbEU8HCaa	192.168.1.122	53758	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FG59dkRw2RKWk2zT9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1051601.786443	CsOpTljCuPKouVTW	192.168.1.122	53759	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeWYV13CynMfPunA8e,Fywnhn48TR3sajIJ5a	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1052190.473152	ClhN4i2SBcbjimX6j2	192.168.1.122	53760	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVMuYR1kmqFEvJAxWi,FnwrPcuoZoafduun2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1052519.989033	CrCMbYdH1hMmNCw62	192.168.1.122	53762	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F03mcL12KRHKuRQyv3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1052689.095850	ChNoua3Pvi8h2pwez2	192.168.1.122	53763	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrB9rN35EqhJtOKNg8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1052844.423293	C9CfUtM1fbXBWWus3	192.168.1.122	53764	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fx0oxu355moOwJKnN,FPEAfuhsfn83tlsg1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1053498.102915	C3NmM18F2cmBrRTL1	192.168.1.122	53765	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1FgXe4Xjxz7Ffrpji,FsUscA36unGA2MUr6c	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1053798.553700	CLFDUu2oz8eE2BgA0d	192.168.1.122	53767	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fm3ExvLyo8CgxGCmf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1053972.631156	ChTrsSP0nWcUOSZBb	192.168.1.122	53768	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhIZ6bYxk2Q4bEEFe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1054149.950141	CZhD7J1h4JW1Y0bUg4	192.168.1.122	53769	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMX9Yt23v1KMLQnR27,FiWjPS19F5Ij5KIkK7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1054715.614174	Ckg6dP26CR2a313s52	192.168.1.122	53770	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FukOL03tgV8mlUqm9f,F0dxi92ucYXI09fnz3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1054990.089224	CsUIzFwT22ylB1dCc	192.168.1.122	53772	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFO3z11MPrji36vLs8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1055138.157073	CBRCBG4Xko8eNyLuK8	192.168.1.122	53773	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrUQ9b1t2NsTO64vDh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1055273.486070	C6m5bi43udj6Ch1a9a	192.168.1.122	53774	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwpwA84UUdxD2oWAJi,F21IbO35CjMhcNDla7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1055862.152007	CXjUIc2ebx41Hgctei	192.168.1.122	53775	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHsJL93bqWudbDXgB1,FTdAdE4L3rFz0sLcAi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1056151.611660	CwFm4k2svlkDG43W65	192.168.1.122	53777	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FP1v5z3bYGUpkwscH5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1056278.687042	CLLcUr18FxwLbc2apg	192.168.1.122	53778	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGSSzM1bUohCcoBA6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1056455.004597	Ck3lPV2rnR4IuqDy5l	192.168.1.122	53779	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmkMNh2J597j7bV5Og,F770klosL4uabQi3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1057045.693886	CZsCUy37OuAPFuiIse	192.168.1.122	53780	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMW6yfnjIZgBNp33k,FbbfZH3tR80dpWJnLd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1057355.187169	C3iT9U2SFCKGpW2cR8	192.168.1.122	53782	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZ1ev12Bpz65TVLOCh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1057529.274880	CQXU612a5tLcfSRWc	192.168.1.122	53783	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQLhek3LpLNrFDGUa4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1057670.592247	CoO6xI22FJoCww6pzc	192.168.1.122	53784	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFZ424308yNAMc4yjc,FvN7xs3CAw0BTAu1Nb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1058250.265981	C6axX94A7d0xbTNTL2	192.168.1.122	53785	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3rg3SUJS7bpr1833,Fkck2W2JEHFkH5HzQj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1058543.747638	CxpNgb3LJtEliDJ1i	192.168.1.122	53787	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKdD2Y3Z1mhxWzSZY9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1058697.814868	CQ0fOi1LDZjfbv4N7l	192.168.1.122	53788	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQ9hX61aFTX8E1kV0k	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1058854.144002	COpR3MpM7vgRTj9we	192.168.1.122	53789	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJq0Yx1My2EOWfEsY1,FZ9iCc4htVCnRCHGsi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1059422.811335	C5V4q44DzcUutwxdL	192.168.1.122	53790	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fa4OGizVy8QGlFclf,Fvq7d62KHKp1Un7lM5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1059687.963146	Cj7Boj4vhC78e7FgO9	192.168.1.122	53792	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FfzMNiaSw4CNSHlD5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1059815.141082	CC8BLC2BfVdNTGrG2e	192.168.1.122	53793	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgC7HC4DnuGBUYsFKc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1059993.461878	C6vKjs3LH5CzFbY065	192.168.1.122	53794	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCfIyz2qD65i2eEKf1,FCgDHMUcX4tiudvNd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1060638.129274	C0GK4Q3CQO5yH4AIs	192.168.1.122	53795	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxymgTLBRtUuhbdic,Fwshio1NKk8ZjuHqgj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1060912.586952	CQ4BAD3PpoIksolEfk	192.168.1.122	53797	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FN5Gba2yR3Nj7RA85f	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1061058.659206	ChfOVx4a7Me41szSy2	192.168.1.122	53798	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3XSXfb2brOXhzdqk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1061237.981197	ClsK1y2Z4ShpxnV3lk	192.168.1.122	53799	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCKNew4iavb5HfDpu6,FNMgLE1qECUL2HdPV7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1061499.146665	Cgri2f2whFBgJkxdcb	192.168.1.122	53800	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKw1nE1vaGUsJkihBd,FraViQ3zt6qzGLvWJg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1061763.618541	Cq6Y2UzBqNDYL26j1	192.168.1.122	53802	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcgfCF3WysKx1B49Re	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1061932.655663	Cd27Xf4sHapNgfU8j6	192.168.1.122	53803	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FaClK44asE22oMH1N7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1062100.972668	CbC9Ax47MSGuIwg9Id	192.168.1.122	53804	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBUoZy4yReqEdyAVL2,FzoUFgZq5aBRmrVw	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1062721.634983	Css4f11XVY1OdZEgOi	192.168.1.122	53805	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2Oil31RAoQLj1xO8h,FiHANq2t562J9gZjUb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1062993.129966	CSsH5E1xB8Tw5bb05g	192.168.1.122	53807	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRV6LGidtScgOCsO4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1063157.251649	CqruPi2fYOq0YfBeW4	192.168.1.122	53808	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7aTXZ3YyNxufRtVi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1063292.579000	C6hEHQ2VFW0Rnm2ep3	192.168.1.122	53809	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJiDJ23kBOnM3hLsE9,F93gBC4HsGUqJmB9bl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1063845.310416	Ceu7Sm2iLGZ5R1oLPd	192.168.1.122	53810	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQQojg4lLIPlMxApN5,FZ22Yn24NlYpu4ThBd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1064143.783161	CvCjG2XikiXUyBUt7	192.168.1.122	53812	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0xnMA4eulXMmJJdHd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1064267.843260	ChYAZV3LBRju3NKJle	192.168.1.122	53813	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWnYRJ2JyJvkRm1Plf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1064442.158131	CkVtJ23pUmRPy6OB2l	192.168.1.122	53814	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fe3qxA1znB6baNcsGa,FmN8ph1SheafG5M9J4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1065063.832023	CwjYAF1lDdbGAD9252	192.168.1.122	53815	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjGbgE24Qg2QsWqfJ7,FezzV33ynsAL9u09R7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1065368.297005	CJzyCp2AxeNXWXBuI6	192.168.1.122	53817	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcGxem2Mug6Txwx7I7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1065502.348040	COynWT3YR9pI2TLs5j	192.168.1.122	53818	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FiWaNNuRb0Z3b5r79	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1065653.660738	CeYfFS24DkWIvToVej	192.168.1.122	53819	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXidva3WMyHiy9kaz1,Fa2wD24Hwohp3ImWXl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1065908.827379	C2jVZTpYZ5H9KiTBl	192.168.1.122	53820	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQkMWG2FBIg8rpSLzi,FKbx1k1DjDtc876Wyl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1066208.304097	CiOCXUoAQ3HLz2mvi	192.168.1.122	53822	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fby2ol2JQZJcTR4lX1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1066354.393467	CSrlqqE1lGpPqJNPj	192.168.1.122	53823	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1xUVw282A1iWsbcqe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1066500.717831	CmCZggxsYV7YnA6Sd	192.168.1.122	53824	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLogui20BwCa4mEVJh,FEuLXV37NSPMl0sDje	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1067093.390324	Cz5xQd1DaVbGzlDc58	192.168.1.122	53825	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F122ON3VrG9yv0Hl78,FhKnMey7AWNBle5Tg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1067373.846543	CvhQ4GOaG8zXsEwt8	192.168.1.122	53827	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4wuk32bA2sYJxW6bc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1067533.898832	CRvcNT24pjdc8nof6j	192.168.1.122	53828	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0VBId46xnIl041mDi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1067682.216934	CtzWOv1mfRCLvWkhX2	192.168.1.122	53829	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1cl87hLz7JPj7Zbj,F1vT6U3V24dJXjju1h	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1068239.899445	CSyB0t4eLFdnKk9VGh	192.168.1.122	53830	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fr7VF52FhGPwzWCGR1,Fpd9Tk1SsLaArOqKWg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1068549.365728	Cyn8RogQJYTaVyXOj	192.168.1.122	53832	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFpZvP3jvqkWkXOy8d	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1068721.456637	Cnp9ry3SlIP0L5PKYe	192.168.1.122	53833	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FP6me723hE1WS3Xuk9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1068894.770000	CteGZ64StrZXnLUDg3	192.168.1.122	53834	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtCKI84IdURcnySIz1,FdNmCs2q5Gws9HJfF2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1069438.442013	CfDsPR2Er3GgKEUv0j	192.168.1.122	53835	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8c2F8qYv7T3SnX5a,F1J4fC1IPQduQEJ35f	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1069747.928157	CSVs0h1Sk0eeqeKWR9	192.168.1.122	53837	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FucS51vLbPbLLP0t2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1069916.474740	CYsfbG34byxvDwhXs7	192.168.1.122	53838	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6GJ1O1DrVbTmezcwh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1070051.793416	CH8jw63ylP9Qec0FV8	192.168.1.122	53839	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuKjg14qTepv0MGh4b,FLEFaQ2hogl3iraDSe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1070701.468289	C8oVru3RHDBgqihhM9	192.168.1.122	53840	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQEArN2gJWpv2bayY,FBN7rw4XMI85sLf0ka	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1071351.432125	CWJ1gVL1HTyhWuX22	192.168.1.122	53842	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhbPz52izlWj5qFTrb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1071482.546996	CgTk8X1yxhYoL4OOng	192.168.1.122	53843	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FbjLg61OtiDYZ2ymi8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1071612.856900	CCScnf2Pvz74vitub7	192.168.1.122	53844	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgykJj39DtoFsq7f38,FCyTmo4Ts7o2hUX6Sc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1071857.028966	C2zl0H1bU0sciYEBml	192.168.1.122	53845	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FE30k83PTk1GLiZeA8,FMNQUEHNuXzZzozab	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1072158.524039	CpdZr84Mq5N0G3bWP6	192.168.1.122	53847	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYGDXO1gaZmoggIxCl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1072319.599991	CwCAdz2b8KmeOkkd19	192.168.1.122	53848	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FCapMQ28d44ek16g1c	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1072480.916704	CvFUwiKaMofWWqPIh	192.168.1.122	53849	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2TQ0Z2EzmZF9PES02,FQZujd20VOSf87QJnd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1073116.580994	Cdyk7Y157JnrHczXj7	192.168.1.122	53850	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgJYth3xezYFhL4fw8,FDNRVY3N8Upvj4QgJ9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1073416.037664	CJo7JnzlAyfFbBtq3	192.168.1.122	53852	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKPZOK2uevgwhy7Svl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1073545.081609	CVcnq54Nxvh2wt9JQ7	192.168.1.122	53853	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FEZ8rH3e261IRWBXs7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1073690.405282	C79qlAuQpOlHKbKR8	192.168.1.122	53854	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzLdcT2RauNKmRMU9,FIYLvF39VFhVUiARNe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1073967.864261	Cway891LkYD0DrSPAb	192.168.1.122	53855	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FO2equ3P9h3Z1uEBza,FiN95T3bxB3LDf3Nac	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1074252.773347	CQK8Zn4GLMmCVs9JH8	192.168.1.122	53857	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnvFlu4BGOGF2tNmDd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1074412.839513	CeidNJ3SnMj0cre9We	192.168.1.122	53858	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYQWsN16j94vMBKQHa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1074563.159967	CKcEAj4X0Ti2LDjqu2	192.168.1.122	53859	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3RyjKRYGANSpo92,FmtNJy3LiXAeg5cam4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1075125.839073	CxnMb117N9upQRtCPd	192.168.1.122	53860	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQ9R6SBNwFl6GOXJ4,FezT7S3Y3VVxkBsjb7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1075428.333883	CgQQT8q3DZsm3GVF7	192.168.1.122	53862	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FsX9z83e6N0JmMHWxe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1075572.407023	CmAhnj22Sh8GqqZlea	192.168.1.122	53863	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FCDiBW1TwTBNsrxKR9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1075748.724434	CepZUx4LCg4VaaFqv3	192.168.1.122	53864	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrjbAY6WusAZj1AV1,FY5gSZ9NQ1jOT9WFa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1076348.397005	C5e7VK2tVOFIKzOHk9	192.168.1.122	53865	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZE3nE3O7r19UgHGb5,FUdIiy4emwdlJpamna	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1076688.899812	CIxtEahORBlXUwMQg	192.168.1.122	53867	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKx9Xq331tPwQFkWV7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1076834.991977	CPHW5B2Lh5bZTRrRq	192.168.1.122	53868	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fsa2OO3kXmsCwgc05c	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1077011.310255	CxbTIa1Ll6Kr1Uwz81	192.168.1.122	53869	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZlECb18a28MggSbG2,Fk7Mis2w1Gh7OO42Ie	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1077329.487702	CzNuy84AKvOVhmN3Wf	192.168.1.122	53870	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fvjdn52PRj6z9YWRtl,FQ5vvJ2UL1b5uGMpLf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1077636.972659	CGlZx33c0HfmJq9YWb	192.168.1.122	53872	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXLwzF3umNPTaiX2jk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1077799.047940	C0dAyB2hepDYbyjIYc	192.168.1.122	53873	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQekkm1IWGcx4XNK26	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1077967.354387	CTXGYp2ol4GPUgABek	192.168.1.122	53874	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2qFLRMe8UBBBPBle,FJ5fBS3yed67Xg4V6a	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1078515.022230	C68ZWm45jjqejqtobi	192.168.1.122	53875	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbFc2u5w6c5tU7yV2,FjWCEcFkNknK2QQGh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1078814.499801	C6Spve1eOaXuJ4KAYf	192.168.1.122	53877	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVAYIF36Ov1zFtJcna	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1078960.558078	Cb4GMV2F624VMUbua1	192.168.1.122	53878	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FydLJn270tTel3s92i	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1079102.867052	Cs1GbGOYEVq763dVl	192.168.1.122	53879	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMl0kl3qegbg3YRNG1,F09D0NHWxyqfGbMTc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1079343.342789	Cu7cqq1sjiUjXqJEv6	192.168.1.122	53880	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWRx6UGdDouF7DGMd,FaJUU2143GkQkwMnF1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1079643.827887	CTL6Nt4mgQkPzCH5Ic	192.168.1.122	53882	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fsq9vg4N5xSG4MKyH7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1079781.939001	CmQ9pP3rcEZAWf4QNl	192.168.1.122	53883	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1dejp151x8J8mB3A8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1079944.257100	CLyrE8qQsI0ec5Ocf	192.168.1.122	53884	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fmwhug195DTRwoIR54,FlUH2Y1kNtFO8n9zYj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1080602.933833	CsvokxTX5O7qg0IMf	192.168.1.122	53885	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ficwbp2ImJxxE4oPod,F3y7yr1TMkPHgueWak	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1080951.410546	Cu0nE14fDPHmhRNmmi	192.168.1.122	53887	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpHNHv1mHq6RSOnzWi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1081127.503626	Cmijab1uk3ZOKr8Nya	192.168.1.122	53888	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FddMGt38vUi8Ugrre8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1081285.825761	Cvkttq2lVfqiUBCCOb	192.168.1.122	53889	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FewfI5yAtGzS1way9,FQs5c71M0RfXtaE2ic	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1081898.496641	CmkyXFUP2Zzvu39og	192.168.1.122	53890	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3Srcc4KdorF0G21Cj,F4v5vcbRACpDA1LFa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1082183.981717	C4dlGU1cGyf321Ymk8	192.168.1.122	53892	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnJu3Z10riXnA07Ifg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1082334.078161	Cm52234JFz7BtqHUbe	192.168.1.122	53893	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtAxcGoVlhVznIgqf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1082461.395956	CN9xF31DvAWycXeOy	192.168.1.122	53894	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQpcmw2IC0wYXEsclc,FPlkgS1D6h2By8UD99	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1083111.060040	CDAnzMgK3NgwDKTi8	192.168.1.122	53895	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1nxzO39tONdTQtxRd,FVt3g6AtrwrfC6Ikf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1083411.521604	CPvmEvr26jNkRnDdc	192.168.1.122	53897	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUHXXG1m5CYJmiGp4l	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1083546.571452	CO070PaTLA29ubmh8	192.168.1.122	53898	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6Kz2c18zjU1EitX4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1083673.889233	CrXZd32DCAGw0ZGhN8	192.168.1.122	53899	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fp5ZL93as2kNby5e42,FC8Y0B2d2fpEQPvaM2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1084256.557116	C2rZr61qGV8UoNYHt3	192.168.1.122	53900	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3AscZ2sfFN6H4OWF9,FJQgID4mJnHo0Tgck	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1084558.993962	CTkSs512zMSLkocTLa	192.168.1.122	53902	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzQOLN24ha2sRBBu64	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1084722.052515	C0f6no5utBAuJuKfh	192.168.1.122	53903	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fp8ya4pipMgfjhIRl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1084883.367976	CNQUPmQgCoSvhco1d	192.168.1.122	53904	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEMhE6Y4TTn6MyCnd,Fp1bbO2se1yvAiLke2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1085458.045135	CBAO9s2AuNTNcNmFQe	192.168.1.122	53905	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4ZTc344fT4uX10yk5,FLXVA22nmhWv9vSze6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1085809.523145	C0EPfV36SCb14bi4b5	192.168.1.122	53907	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFqqZIa0640D2i201	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1085972.600167	CubAGh5PiEW9YagZ6	192.168.1.122	53908	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRFxIfmZwkLSwXRDc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1086113.917277	CZLihA1oJx5QYgSIo6	192.168.1.122	53909	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNZLh033Vm3R6oujQc,F2VML61SNRG3sZlIIg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1086669.597194	CsnLdIKk7DTMzl5Sk	192.168.1.122	53910	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F33L1LAGFSrU8v9Lb,FOJbKi3sgptnOZtGEf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1086959.082056	Cpwa7c1Xymy5YLoyj2	192.168.1.122	53912	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FaAXEo1b6p4e5LrPQd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1087093.151036	CEwTUn2axlJsuassn6	192.168.1.122	53913	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6LDhh1nuomcFz59Z2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1087261.467819	CD8vSB8sc6VZ6zXOc	192.168.1.122	53914	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYC5hW1geXQ1dYaMUb,FEZe872o9BL9LvtLX5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1087882.129839	CUTk64GOc2siEUFz6	192.168.1.122	53915	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fkg9dn49dNR9ZG2Nt6,FqHDD442ulI3BOovOl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1088154.573179	CF3W5u2XpzEf6kBde2	192.168.1.122	53917	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FW9ba21ssDsG0klRX4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1088317.600118	C9EB9dwtxiusPGapd	192.168.1.122	53918	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdmH0g4VSAIYsYHCAe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1088495.922658	CkfEkB4rFQvdEqHLF8	192.168.1.122	53919	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNd7kU3lsaLWkz511k,FMRP2i0iWGGCRXKN7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1089117.596162	Cy8Yxi4whwlcWKgqS8	192.168.1.122	53920	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FImOBNG4RSHbZ8gSd,FUh72Q3A1Fp4xtIt99	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1089450.054943	CdOzMS1K5UhjSI1Qo	192.168.1.122	53922	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0a0tj2uXA9bxQRnJ7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1089627.114879	C5gF1g36QPZVqnV0h7	192.168.1.122	53923	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FvnxVE4rfbrfVtbHj6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1089788.430652	CkX9kk28BDz1jcc6Nb	192.168.1.122	53924	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsyAt23wpB48qPitI7,FVA7CT2ZHsBaX5sIVj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1090386.099800	Cf28tH3ZdWFNTf7SU5	192.168.1.122	53925	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPvkjI1ZhO017o5c6a,FiesYUXJa9VsI6tNd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1090708.555985	Cv3iBb2TjWZDUGmNQ	192.168.1.122	53927	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FoqojX3XU5cjTQ1gjc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1090856.591493	Ck54Yn4fVWxGd9thpb	192.168.1.122	53928	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHBGfJ1S8UHBPermpl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1091026.911401	CBpMZMDuzBFXESWAf	192.168.1.122	53929	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fs4ty2SNsvvfK1bU8,FEVItv4fcWln5xNmgh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1091304.089608	CX5paL2JN3xXC1ttcj	192.168.1.122	53930	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuG0HM3Hea5D9bZHHe,FGMFrn21gxKJdWBvge	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1091597.594627	CMplkCpCN2fz4942h	192.168.1.122	53932	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmmmizrE6JjsQwiQ5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1091725.692510	CLoMrc1DDYVBZst8R5	192.168.1.122	53933	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5Khfx1Rq6nXqGWvb1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1091882.010383	CJTNoG2wNRn6I50LK7	192.168.1.122	53934	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLUp0D37673bPJTPXk,FMB9bN11fA7zsag59c	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1092427.685345	CvL7Kg1MqQ4a4hCLbh	192.168.1.122	53935	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxIf7drcqsQGADZW4,FJ7rxoLPDJnpmT0Z5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1092716.139791	C9J68r4UCyQusyC2k3	192.168.1.122	53937	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGu1uc4GcT2oVBr4G5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1092860.203174	CaUoefKEkB3uMyLSk	192.168.1.122	53938	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWVCQg16d948HeCG1d	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1092982.523149	CnTUbqZkMDXVN9Xnf	192.168.1.122	53939	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6lLdt3Y75G3ZJERu3,F8IBSL115DIHnoKWv7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1093596.185727	C8OkuUQJT2QeJgqf4	192.168.1.122	53940	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FX7F694zfh605WlCJ3,FnkjiK1GLANkzCOfrh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1093932.595087	C4Js9l1r7sftsiQrSi	192.168.1.122	53942	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fkn6wzmeBGiu8O1Zc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1094089.660270	CaE96H264AcEWqsoX6	192.168.1.122	53943	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrfqY84qRelylfp9Xe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1094246.971208	CCmnOk39rrQQeKpV8c	192.168.1.122	53944	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaGqRTn1G4ufWY7uj,FJsF4f3rKz5v4vhtXf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1094523.148377	C2D6Qr23H0ZZHIdbbe	192.168.1.122	53945	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCzbsg0991v5lt0g2,FqyBux4ea5NX03GRN8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1094852.565876	CXcn234RcT5kAkWTT1	192.168.1.122	53947	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FsQVEj0vff1QudK5f	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1094978.648511	CJ4ZoU3xu0bpZvF6V1	192.168.1.122	53948	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlK6Ms4KmTjTyjxoT3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1095101.970261	CFIWVkKQzsQnziGdc	192.168.1.122	53949	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1jYHe4xBU0vsFEZ51,F9Y4fG1lXUfptKMKT8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1095709.644036	C79lyV2de8ON5cRXQi	192.168.1.122	53950	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhlJKX1j77oQklq7jg,FyxSmF4YMbMrO2WWu4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1095995.121456	CuY4Rq1UMiDkfoRy5e	192.168.1.122	53952	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6GihI4xMUh7pXOK9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1096119.208228	CCAMJa4rwGYWrvsx5e	192.168.1.122	53953	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2lqwC4i95ZX5Vts42	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1096268.547485	C55Ess2VHuFKxRpFJ7	192.168.1.122	53954	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVEipC44nz8CrZFA1c,FaOP5q2hdiwyKOWQi7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1096540.718905	CQWRud3lr68W4VHaVh	192.168.1.122	53955	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfAaoN1BGVQ0sb3QVe,FvVfam3eThgqcrgHN	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1096798.208519	C3xqiGEvuo0iG7C8f	192.168.1.122	53957	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQ5OL4tU8rzhBOiZ5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1096927.300494	Ciim6B4f2Jko26fm1f	192.168.1.122	53958	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgPJGr3CshSgwwDJe3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1097078.622834	C1Sjh53FrJMtvVcOKf	192.168.1.122	53959	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhE5Y52Zr6wGhaRFB9,F9GnaH3xWsc1tJKbnc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1097691.293416	CAZ2XE27c4g9eZIxIf	192.168.1.122	53960	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmVfxaxJkEz2Bren8,FEsehm3w1ehwp6igN8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1098015.714981	ClhO6g1MsyDTARojC5	192.168.1.122	53962	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBhywV2ImhjpiPjLSd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1098159.823836	CvaxtM2yDyJIyMLbci	192.168.1.122	53963	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXMuHj2IQ5rUd4AAml	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1098316.150445	CIONxI1JWb2HJmTbFj	192.168.1.122	53964	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsY7Yy3YOTd2VYijL1,FAYq6R1tMBUymc8Tji	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1098957.814350	C2Jghy1J8ojS4JFsH8	192.168.1.122	53965	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fy0bsV3yR94fYBrWs,FuETWm1od3zuGJpAFf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1099289.213854	CpFozQR2EADgbW5Kb	192.168.1.122	53967	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FSlJoKEUThO7xc1ec	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1099459.261925	CmBo7y2IzlktiGoRSh	192.168.1.122	53968	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FX6H6D2YfIILn1kK16	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1099623.579890	CqGeHO3d91olUEzsxc	192.168.1.122	53969	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeAPPM3VjRrJyEC6ic,FrBakO3Yewpehwa5J6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1100246.246637	C3M8fV2zuSofx0fjWj	192.168.1.122	53970	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtWqJ83bLNkK71TNGe,FGJRBS1rpkJEnrROn3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1100552.720658	CvFi4dNG1F7X26v6l	192.168.1.122	53972	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZ84T41liF02R9joGk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1100674.798476	C5mUmNvCsQhNBl6wg	192.168.1.122	53973	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fjsf453BAg5aLrQEBa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1100809.115681	Cwv9f740u5FNtKNt31	192.168.1.122	53974	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3zhqj10jpmQ5abuij,F4Tau03DvYVlBaIo75	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1101417.791249	CP1Xl42Z2FQPYiBQAe	192.168.1.122	53975	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxEz0h1Jprs9rj0UL5,FBqjUM1OCFCFTn5HFa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1101742.257822	CSHii497AY2QFMPM8	192.168.1.122	53977	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fcuc4eEh6MlelgW1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1101888.353498	C0YpVQchZ6Cm7gtzi	192.168.1.122	53978	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fc0qxc4tQskSbucrOd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1102057.671272	C0UQKC38KlcZ23Scz9	192.168.1.122	53979	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZWTjp1IrABpbuTXC,FTkHay3WNhZocjYZe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1102634.591953	CpKRXL2cvpO7dQo6oh	192.168.1.122	53980	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOONIJ2YemmJAnuvm4,FoYkCV2DyDMY0HCzkg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1102951.101874	CrRhfo3G8AOVzqRxSd	192.168.1.122	53982	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFGsDC4O5gGoUSL4v5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1103072.215166	CLugkv3EnmjmidDwA3	192.168.1.122	53983	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBtDS63nQyhTEkOPv7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1103221.534307	CJCSi92MX2ZOJRMnH7	192.168.1.122	53984	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIxEGLeLvzs2tAFb3,FjFisg3RCgSZX6QT05	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1103875.214268	CqiZUV1ekgNDwB5rvh	192.168.1.122	53985	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FE8jtV1ZRCF3Skx6gh,FOiSSxoPAg1r1BaRe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1104198.687320	CWgyEl4XzLPHQpzo66	192.168.1.122	53987	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKuSZbdvyRuNk7vE5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1104341.740899	Cg1CAy43Vqgvdc8OMh	192.168.1.122	53988	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrZSYz393xOvvK1tY5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1104462.057874	CRJS5MrFF0b6Nx1Ik	192.168.1.122	53989	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGsmnz2M0SGQF7F8Dj,FbcPJcXmaqGF4qon1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1105087.727453	CGZYrc3oSAqrnhpLC9	192.168.1.122	53990	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaJOBl1P35qjWlmMB,FHu6474cR4H38G0Sre	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1105414.201924	CwJbTX3hMbTo7ME4ih	192.168.1.122	53992	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fx5yEn12T1BEBuHV4l	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1105536.278059	CjXkLy3VmpahdzkKEa	192.168.1.122	53993	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSmzHt4SlgEteJEY36	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1105663.656516	Cka5Xa49laYnMR54a1	192.168.1.122	53994	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2zG7DYBViJX5y021,F7ggpA3xmFeJT3mzQ6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1106299.329516	CgYtis3XNZJMUE8RRa	192.168.1.122	53995	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7RZN44Deh1yaa3pec,FUE2X23CWaZlBKiIlj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1106592.817700	Cz3Uag3sTOfedoM4Za	192.168.1.122	53997	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fr3Iq5407PRxX9lord	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1106717.916958	C2PMEe2cxSW5tNrwFh	192.168.1.122	53998	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FpuarU287lsFjUC2N2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1106890.239030	CP5gB91BVdmn4JkET3	192.168.1.122	53999	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fa4QeB4OtpDVKBhBki,Fs56Vdtl8qrQTT63b	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1107464.915220	Cr51lM3D9YES2aOV4d	192.168.1.122	54000	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fm0I9q4k3hYpLJkndi,FXd9Fl3L2GD9TmhSgf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1107764.388591	CU0kBQ2KQYNJ0gfD0b	192.168.1.122	54002	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FK8koaYpVQTvKoLSk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1107887.468318	CCqggd3v5JWPYfGwg3	192.168.1.122	54003	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHPrvi32ef50W0vmMf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1108055.785284	CmwRz23TVY1akOoyr	192.168.1.122	54004	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQVmTZ1G6mErYFLwq9,F7xyqF4S6f0YCyGu1f	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1108408.962742	COBVv71iK0liHsxGg9	192.168.1.122	54005	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkjnN6zdAOeuNr8H9,FCab4n3yE8JqI24szg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1108693.441225	CqYvLJ3hRQzi3CX2zk	192.168.1.122	54007	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2tWor3UFA3vhLNiX7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1108845.516173	CgayVx4RKt4WsKr775	192.168.1.122	54008	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmDgEL270R0wXHjgf2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1109005.830899	CrSdfND5V3t1mKPi9	192.168.1.122	54009	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fflsq42TVSPD2IMrK,Fabe8S1xdDTIUOcsve	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1109314.995190	CzeLON3Nzh2LuVI083	192.168.1.122	54010	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9TwzhgsAESvghHH1,FJrjnm2eofGTflCfN9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1109598.467683	COoFAe1He533G252Db	192.168.1.122	54012	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmUwyk2ABZf3XY4UD8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1109758.578868	CqXIcJ80cE9XH164b	192.168.1.122	54013	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FoZTtk1gbX0mZD8tDd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1109907.897739	Cf4ktN3k0Y8wkiVadj	192.168.1.122	54014	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAiekr3jFHk8UShbyd,F5wKn03ExAmBbGzqtd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1110256.358689	C8zmv53J8CNS615Gii	192.168.1.122	54015	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4mo2C1J59VFvqkBU,Fsp8LH0UFAnYdVAhc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1110595.821881	CD1kWs4l1JodCyzm9d	192.168.1.122	54017	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXIDgT3Wso1vARNSd3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1110721.873996	Ct5JcR2uSaYTIqSwK9	192.168.1.122	54018	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgXA5u3a4xpPjPq5Bk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1110861.198508	CRzfDIidMQBk5Al1a	192.168.1.122	54019	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FK3GeA2kFsYauqgjfj,FaSbva4TM7dim2eIF1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1111427.873431	CcrPQo1w83ewCOSOD2	192.168.1.122	54020	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fu7LOS2hwRq6vpWvW8,FyVE9N3ToyvR1Qzl3b	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1111732.356127	CtkxHk2NTO0J36Lqe9	192.168.1.122	54022	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FvbWQf3Cr8U5UNYvJ8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1111878.437067	C9BlY31y948CnGph2k	192.168.1.122	54023	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FV5COc2QBR7AS0Pm8f	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1112024.761327	CBXZ8D4akCRhW40P02	192.168.1.122	54024	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfgyLc40UqXlnJpwA2,FawWdT3h9Y5LpPzwM	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1112305.936031	CxvLAF4nUBu0Skw0X1	192.168.1.122	54025	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6iunu4Td7IHZI5AF2,Fp3Ba333UZxRTy9aYk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1112595.396770	CPDLYm4W4wvB2mTDYl	192.168.1.122	54027	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIzwro1yRaq7l4krOi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1112746.444746	CVqQJhNP77t2bzUia	192.168.1.122	54028	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYase532NtDVVkgFva	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1112906.759156	CZVRje4xyg4Exuy8u1	192.168.1.122	54029	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqaMyAwDQkUjFIlMl,FR18qP3mJtV4bRm7a8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1113559.428003	CYnNSP2MTLM3a34Tkb	192.168.1.122	54030	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNie7445auDtcoQbs2,F4hkgo4ENp2DUhLxAf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1113832.901534	C1hY1L31R1ONQFV3Dj	192.168.1.122	54032	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F9STg9f6xeZdUKBzi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1113980.960210	CS4INq29e4CB5RTr9h	192.168.1.122	54033	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6tnWE4VKKPSQ1RRec	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1114144.278965	CWQ0dxCA80eS4oP47	192.168.1.122	54034	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDp6GL1R0Nm3G58zV7,FhwoL74rOMxHqPzzbf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1114440.154523	ClxktoFhfIVDsz3hk	192.168.1.122	54035	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FN3gTC4Oz7L3f3sQ9h,FKgw6q3A2n3FRG1Alj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1114742.642074	CqAdjP1wplMoB4tOag	192.168.1.122	54037	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKkVZ53kKM6ftzdHqg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1114879.731908	CbC8bA3lN8zCWsaH71	192.168.1.122	54038	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKLHzE4t97xsZOleEk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1115050.051134	CAMFk44ix5xfqYJBA1	192.168.1.122	54039	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fy5Ofa4qQcFp5pijn5,FG2k4uDEj6SJwY3Cb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1115391.211732	Ct1p362Uow9ufR09fg	192.168.1.122	54040	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fknmzc2o9dUSLyE8r5,FkGuOK1S9ej9WqNhy1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1115691.704822	CNPKLh2zFvC27jkCwc	192.168.1.122	54042	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGljgy11riIdcDtR4h	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1115845.790875	Cve7JPUu8lteujocf	192.168.1.122	54043	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcYHzoANu0M7AQXV2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1115991.114282	CzpTEA4G20b52H6HX1	192.168.1.122	54044	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fck52r1f6vKtorWOY6,FW6cqj0xPIoY21iA3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1116558.790303	CSlsVh1vOttIJ944K5	192.168.1.122	54045	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMTRYt2dEgrzd0IHz8,FE3VN2fYNeWf7Zu8f	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1116835.278195	C1ZPXj4P2s8ymaDLqi	192.168.1.122	54047	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDBDvm2j35AlY0dZNb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1116960.373471	CWirSc3hFFbTLIYj94	192.168.1.122	54048	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FiV2lk1v07cLJ2AiI3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1117106.928074	Ce7dyk36Dr7L77DYed	192.168.1.122	54049	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxcxhD2GZXUMFT26lc,FIGXCI3FnR59Bmmt04	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1117725.598722	Cg7pSq2G3G0uC0wKHd	192.168.1.122	54050	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtOsYt32Cc70MKXGlk,F8K9B4sUiXrzR9WD	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1118045.073767	COQEW9qr40NAUIh4f	192.168.1.122	54052	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fdvr4t394NAxCuTR9g	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1118214.135957	CV0iGk24rnzdlC12kd	192.168.1.122	54053	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmwMnR2taSsGWAWhv3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1118343.447027	CbR3Kz2F0tr4VS0y9b	192.168.1.122	54054	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMWeDd2AUdbLnchaLj,F7jYTe1fq83KMBnDD5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1118916.109838	Cf0DkpZ20ig4sQqd9	192.168.1.122	54055	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEkdaX3gyii1HVEJE4,FgcVfB2vT8JC3bvZ9c	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1119211.568698	CAk6NA2GViIJ2EAcx8	192.168.1.122	54057	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGAy1i4OSC8nBxqw98	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1119379.621795	CyNGYXOkRQ3SPkLHb	192.168.1.122	54058	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYloFC3PJZk9h7hHQd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1119519.036632	Crla8OXoV9xARTfK2	192.168.1.122	54059	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLpDTc4mGDYlM3L8W5,FcZptmPxvokJGGwk3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1120145.707615	CWmf4u1Uro9Yu0AAp9	192.168.1.122	54060	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNxRsy2KSFyGWMk216,FS9bLM1vSwHRAvEwGj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1120433.197929	CGxEmc136Qpj4UAvgg	192.168.1.122	54062	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FuK2oZ1GJILNU4lOG6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1120610.271252	CPvMCC1VMQH3q5W5e8	192.168.1.122	54063	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIk6IT2pFxGAQaeAV7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1120734.604254	CUO16MNT4PUzz8WK5	192.168.1.122	54064	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAj2tdTe0d6bZO66l,FRc0fe3alacrTQc692	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1121384.268365	Cxam9m11igbep65xfc	192.168.1.122	54065	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZCJxq1qwq5Fgue6l2,FwEhUp15QB6r5CkqOb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1121666.785693	Cgtpv81xEXCUjzoRVf	192.168.1.122	54067	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTyc2E3F2qJuC71V73	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1121833.890397	Cu9oDrtdab7GpZbUh	192.168.1.122	54068	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJMKMT3ETLpX6YmFcf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1122005.221033	Cy9PNB1CjNsdFAkHPb	192.168.1.122	54069	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fc5RBM3N0MB7N3e225,FZFC18jLHnuhZfItd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1122625.884136	CjKlrd4SXXeKwX7kSh	192.168.1.122	54070	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FV3hd12wadg9Lqsyie,FcqfEA4E6Ylib0lGm5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1122915.355184	CHyDLt1YHSLNLHwNJl	192.168.1.122	54072	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYkILh2uJcTzeOd5Va	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1123059.953108	CJ0EOVadaDoWT71n4	192.168.1.122	54073	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FS51b12fBoiXI8cMe7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1123183.274819	CeIoC84VleKKOJkBYe	192.168.1.122	54074	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsuZlShj50DxyX2mb,Fw3Prv1J6d0LDEi58g	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1123728.949433	CGhnnb2RmIIaBYuF	192.168.1.122	54075	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5GveMdYAFVdEP0Da,FkTqgPlagFwWk1QJc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1124007.446464	CGCY5M22mPKmndCc15	192.168.1.122	54077	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FsnaQa2X772WqyKtzf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1124151.552856	CngTfx2Y4oTM3mRDRj	192.168.1.122	54078	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQx9Ml5cT2X21xc5j	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1124293.881670	CCgzSM2UqgOjFj3Yb5	192.168.1.122	54079	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZmZgT2NXEZGgPkL41,FaYmug3by3THypZMy9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1124853.556442	ClzI0g38zMlh7SoUl6	192.168.1.122	54080	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUcTeq1zv3gPg8KXoe,FWziV436S7PYLajfh8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1125185.026416	CSxiyd1A7N6VOFq9s5	192.168.1.122	54082	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FA09lS1RUXSox3qoX	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1125348.123207	CRmyIr2ZvuGwUNPO55	192.168.1.122	54083	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYXW7B15VUTcqTM8Zg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1125477.442612	CAsQNVjJXpUF7V6w4	192.168.1.122	54084	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhGHYv4DPHRLIuLoU5,FFyYdH3XyEMTSfb9x3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1126084.105562	C00VZh4IyL0Nw77ejl	192.168.1.122	54085	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfQcOo2K44CTovRf2j,FnU0NGNFCXMjNBcAg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1126394.586071	CWikwg4sryumwhKuk1	192.168.1.122	54087	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fy4Ojf1nFfh4Rn2Us	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1126561.648274	CQATiH1UtWTKO1rCS3	192.168.1.122	54088	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FL5eO02UclqhCy0s28	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1126803.920683	CUUGXf2uAvZyghW6h5	192.168.1.122	54089	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6zKtGUGfuEZA4E5i,FMzmsg1qOs7nAhE3nk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1127435.598902	ChPUOy41cLGo2DQsC9	192.168.1.122	54090	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLLcv81PKm5EUSUyQl,FyB8ao3j80QIUOYPnj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1127708.056911	CCSRKh2zoqXhyLeOZb	192.168.1.122	54092	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKltZ14Um9jt39A3v3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1127857.110508	CGrSbQ2EygFPwi54di	192.168.1.122	54093	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfUwqZ1tWn46Apyhl2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1127977.458438	Ce8nD035eqNNsD7ey3	192.168.1.122	54094	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDhpgu3TLtO2AJJET8,FRjkzid6eNLN7CYz8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1128568.147946	C6VrLJycSbcTayhM	192.168.1.122	54095	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZw8e417UlzwrjqChc,F9oUnq1bNjiq6pMCif	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1129194.119888	Cwh6qD1NNiwagrkW0k	192.168.1.122	54097	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FaW6qV3cC5JpD73Ppj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1129431.134762	C7l3n91BSBlgfbqt1c	192.168.1.122	54098	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIougf1MRWZTpob3X4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1129670.361750	CPkBcR1LoTGe85TmA6	192.168.1.122	54099	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrBf4T2Np5QE50eF0h,FYx7q34RkER7h55nx1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1130224.027967	ClRMod2HKI6FdLIAdb	192.168.1.122	54100	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FW6M49ka0GotjHDq2,FiRnmN0WWy1nz3Nua	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1130501.517564	CxozBlbQ0EoFhsOHk	192.168.1.122	54102	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrlVC31NyJjYDcVhXl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1130680.621225	Cqsd7X268wdkuXbmt8	192.168.1.122	54103	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4AI0p4zHzVSH0yTEb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1130834.395560	CXAUZb4ujSzRBMU0g	192.168.1.122	54104	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1Plm62SI9wMgd0Px7,Fi4OxiSd2JsPsopMd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1131143.560877	C6LukG1qWiSfgqBpdc	192.168.1.122	54105	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8KkhK14VHK9TpJIt4,FMhOM69nwQtsSad9b	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1131419.041702	Cdmr1U1GuxmsZ7pTK1	192.168.1.122	54107	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fy4wcf3zA9NEJCZ2la	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1131541.147388	Czf0mu2iiprIZkOQJd	192.168.1.122	54108	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FluEL52jIvondeDyD9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1131709.494135	CdxEYK3fXMIAlMBCye	192.168.1.122	54109	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fw9stCCSJURODa5Eb,FE9UJJXP82Dz4j1j1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1132005.669584	C8WTG21RNLZ9AeqyUj	192.168.1.122	54110	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmU2HPZltgPE2CB13,FgCgP9azcsG08yWE	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1132296.185272	C9xber1SWdUuHzPWta	192.168.1.122	54112	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmAQEi1HglQxctY3Hg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1132428.332805	CtDB0Y2q1zIE13n9Tg	192.168.1.122	54113	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRgExj1EuADgAJ6PK4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1132576.660700	CWyiIj3l3Ejf6IWD19	192.168.1.122	54114	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYJ6Yy4fOu9F9UR7c7,Fi0bvw3W32WDVgU0r	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1133146.339641	CNZ9Mu1V4wGIPRWeB9	192.168.1.122	54115	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlAqyT29xjLExf5cIf,FiCGt21L1wa41mUeuh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1133456.828082	CX0sIs31VxKrjZpSJ4	192.168.1.122	54117	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FArxUU3MzTgHaN9mJ4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1133609.941855	COUIaI1p4OJUgaYIF5	192.168.1.122	54118	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIPxay10nl1jdzUCug	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1133758.259599	CV8S5Q3rZ163tTmXR6	192.168.1.122	54119	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6BbE43FLHIQsrqscf,Fn1ASHNUNK3S9pLl4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1134403.928289	C5MCemDVFWxpu0fs6	192.168.1.122	54120	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FupObA4w3TIrlu3i8a,FmmhuL28AFkKmdFen6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1134659.401518	Cm6qGD27uYpqCFTkEi	192.168.1.122	54122	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0s3eJ3zgRfeC8TJs	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1134829.465166	CkplkW3nagUDxIxepi	192.168.1.122	54123	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgKE3B1kKwTcxaIXD3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1135007.795927	C1Amon2V84lj2Wyhfe	192.168.1.122	54124	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLlvyf1xNCrub9eEob,FHyNJ513qqvLLjOC2j	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1135350.959372	C7WZzc4hvwYgkX3VMj	192.168.1.122	54125	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0Gm342GSIev4SdTqj,FE5Zio3rrrk4rCcWu4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1135628.432446	CoW8PfJq2dIHOW5E8	192.168.1.122	54127	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fpqahe38nOaslhecIc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1135757.499317	ChTEiD3PnBaZaSQX51	192.168.1.122	54128	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSyB634PZN5g7aejWl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1135904.825725	CCBnmG4HjxcCEOXb4	192.168.1.122	54129	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FktFMw4ONJZy795Gg6,FEbvgNJjzuwpgcvEc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1136447.496075	CoF3GXJyl6LnOsL17	192.168.1.122	54130	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FI9SNIhVdySWwo6L3,FE4FuHbZN1XJPpjy6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1136738.986078	Cw7IQF4EtxRXC7pLi6	192.168.1.122	54132	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FklIOGVUxvDsMMR3j	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1136879.111983	CkAqxk2fK1wBYohjFe	192.168.1.122	54133	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1J1A71mgvSjjiNik	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1137030.434104	CJxZK03BQBFSeMVutj	192.168.1.122	54134	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdWHUy3xaX8MxdbO39,FHHugSh9PGCbAUTe2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1137581.105760	CXE0241hxYiF2dM74h	192.168.1.122	54135	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhkqEk15uloxmf2qqd,FQ77aa2Tov9nY29Zci	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1137878.567249	CSpJAticBJefiB8X3	192.168.1.122	54137	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCMRL2137uGWYHXxs5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1138028.664765	CPO9vR2UjqM6EyR6Vb	192.168.1.122	54138	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FyK3XY3Xb13UPzksJ1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1138149.983755	CC25DF4dAnmf4fMck1	192.168.1.122	54139	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPtOgG2i6oxx19oDZ3,F8D2dC1X8PCjwc6Raf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1138491.144386	CJAh057lWQfWAqhpk	192.168.1.122	54140	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRqWJO1Qmf2ilXSgL3,FspdCq1zJkGzkM44bb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1138756.609569	CbZA2j4tJKzokkQhTi	192.168.1.122	54142	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1hcfu4YBdxja5cPSe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1138928.689866	CEgs2e3iveUK3qZXA	192.168.1.122	54143	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FzoJNa3GfhYeIdcUdg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1139071.018291	Co4YIg2c4s1Pt1T0A3	192.168.1.122	54144	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0rtXW3m6zqpbJa1Ej,F4urB3pAIHjuGBRx4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1139326.184571	CngL4z427TI04vV6N8	192.168.1.122	54145	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjGphr1m9XSgF6xyYk,F7dR0NLRC3RcsP0qi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1139608.676466	CaRD1jpfbtL4kBdCf	192.168.1.122	54147	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUEjGu4jEepQselhnd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1139783.737881	Ce32Xn49bLspKhqr69	192.168.1.122	54148	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F695aYqx38hhz4yl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1139941.058743	CW6Mpq47zCl95Qleq	192.168.1.122	54149	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhiTFY3Cwh4esPUTah,FCmlRP3V51rtXaxTlh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1140237.224648	CFXb4d3hoDBwp2Omjc	192.168.1.122	54150	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfW3JQ2imOlH7h9bL8,Fr0iHe2ZXb2DDEE0k8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1140536.722247	Cwcf6L1Sfa8z0iOV96	192.168.1.122	54152	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FtF7JZ1VdfLx680eej	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1140682.820946	Ce2MxW3A0xGuOF5jea	192.168.1.122	54153	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPXGA82tuT35738fY8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1140854.261835	CRExOt3nwn3P5b2Irg	192.168.1.122	54154	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNRNWe1Nq53oJubIMl,FWIJD13Ziic1blbbLl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1141150.737951	CgDrWT3A0MG03uVLmb	192.168.1.122	54155	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FV1omz4TlkqXNLUsh9,F3Ctbh3BThYu3e61a	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1141456.228123	CSyY76VZGLAB0iOQ8	192.168.1.122	54157	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNkuk141hwqCCrYQCh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1141622.321671	CucfSG1tIkCVzGDmB4	192.168.1.122	54158	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBS5wb2sMNXGBoCGxf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1141790.649309	C6CrKy4ZdLyzYRWRA5	192.168.1.122	54159	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fb0qKv2XcJeQxdNy55,FaYRMK2JM5yGfJCuj5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1142414.325033	CWGMRq1Ksqi8gD56D7	192.168.1.122	54160	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWwxMw2EMSwh6IL8Z2,FPjHr34HdKCcGYeXLi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1142709.826852	Cm3CyZ1QYfwff2iSL8	192.168.1.122	54162	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFikiI2bLUqYTNkMNg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1142840.913569	CjChqAgGlQNJVwkij	192.168.1.122	54163	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYSQYC4ZMNnmBHajfc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1142998.244521	CYAuJ9pcIWiNRHtYd	192.168.1.122	54164	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEkzpt3W49FCWpgAU4,FV5hrf2W30DSlrlcL5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1143580.932186	C725Ju1hERcV2RQhTk	192.168.1.122	54165	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FH3C4gT0UfZVGxXp2,FTRAj5hTX7xoOZZdd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1143889.390456	Cdpap13hRjCnfxuEJb	192.168.1.122	54167	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcgsS82hj6mu8Yng99	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1144050.462840	CB2y4K2hqcMKUnTfq6	192.168.1.122	54168	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FvVtpS2uH4pRuFXa6b	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1144184.790477	CLaBdy3Tm6ZXuk5g12	192.168.1.122	54169	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLtBVa4cl9bszKSWwi,Flvad042tT77NPQq03	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1144752.456719	CLFsPf3ueVAtJC0fhh	192.168.1.122	54170	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvzsGl2o0k9BFnYE75,FR70KQ1lsUQNzz9kkj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1145049.912407	CREpdj4WbfmKjdWBLk	192.168.1.122	54172	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTjmyI1GPigoBc2TX6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1145174.969404	CnNOcj1qFMNquRJyz9	192.168.1.122	54173	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYFrQu44uVvHRBfj86	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1145321.304064	C4Q2P53PS4Q0QIsn6b	192.168.1.122	54174	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhGXBLCYDSNorxFmh,Ff2rON2OG4ijYKfcMf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1145884.984117	CYVUPn4aNXRLARrMwk	192.168.1.122	54175	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSPec3BzGjZsMLsw7,FwUqLZ2cxuZAg1Nvgh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1146153.475107	Cns6A524u1TRttjGp7	192.168.1.122	54177	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4I9hU19zM5Drx9uNc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1146284.555616	CVdaQr2pbsuiItrHSe	192.168.1.122	54178	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FuRRg414PUYCKsv7Jj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1146414.886687	CzASh03TKzmmv89YXc	192.168.1.122	54179	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBzPMIL6YPM14qZvg,FJfs5V2j5DautHOsUk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1147070.569512	CVx36a4QjzziFo5Nxl	192.168.1.122	54180	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrdRmMZlqllF0XzLj,FOwzUeMMYH9Th4vVk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1147341.044229	CEaOfh1O0FZCTadnh	192.168.1.122	54182	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F98kor1qYT3mTHHi18	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1147476.098314	CaczpVqCKdsbjqDuk	192.168.1.122	54183	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrFJtTUVvpO8UnHU4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1147648.420688	CzRTPz1Mz3bGjBX4Gk	192.168.1.122	54184	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCGG6z3BTOgCO74coa,FHNuTK1qfUC2L3QoFa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1148257.085622	ClKhiV1zAA6WXB37n7	192.168.1.122	54185	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7BN3K1plxHHUIrszi,F9ytpL1izA5rdjXsqa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1148589.575364	CsWlPv1rzuUBoDCyjj	192.168.1.122	54187	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUah4ZXhCSMwbyMEi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1148733.646344	C18aYW3sEBACJgNH6f	192.168.1.122	54188	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fdvozw2MSks7lxT6D8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1148890.976525	C5fJ9S3IquvArnlHOb	192.168.1.122	54189	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FadHFo3UMIAwid9AH9,FZj3LfkyPULYcW50k	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1149547.640797	CA9IsP2aJIb1wbP07a	192.168.1.122	54190	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZ9BXBuuGbf6CByC4,FwGG036qZ6abwqLDg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1149796.125027	CRpLXR3covJVOPhUva	192.168.1.122	54192	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FfR7qX2knSuBhvM4wf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1149928.213754	CIRPpA1LMLu4Ahwzvj	192.168.1.122	54193	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtOsOr4c8UuYCDlPKe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1150086.546138	CfUQLR1ncvNzeUp0Si	192.168.1.122	54194	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0nOij11r8hEjKP691,FNwSVT1wv35MZuVTP1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1150631.218964	CHMGz41SwxIgWZXRpl	192.168.1.122	54195	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FX7mNE4BMJUu2o7wJa,FzU74G4dRZrZyLXStk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1150888.730171	CUxTWm2Vi5mLm71vCf	192.168.1.122	54197	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FW7xWg3uPcn8mAn187	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1151027.844729	CjQB1e2ahokaNJd9Fd	192.168.1.122	54198	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmNCEs2pbsyuvrfiB4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1151167.179519	CrLU7928UN6Sai6cI7	192.168.1.122	54199	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fkoi7u2B34VpJgAPr6,FWReNneuSizY2EaM8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1151816.853922	CmAtep4vh4eZWxaUuj	192.168.1.122	54200	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUwZIz1pZFOVXHNU13,FDQZ3v2rJyWzAMvBL4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1152089.305338	CSVvsH2HsVHv4KKQJ4	192.168.1.122	54202	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6Qrxt4LULIn0eu275	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1152235.370838	C2RxMi2lvIgkz7gKy9	192.168.1.122	54203	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FuzDnn3tSbTbmWlgH9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1152386.692750	COPld96TG0XIalUlj	192.168.1.122	54204	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FE7tht4UbrCldJ0mpd,FFt4ICpXQy6v72i77	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1152933.359067	CbWsSXRpFyvHcYVec	192.168.1.122	54205	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F43eyE4cNBMP79LNk,FSoclC30UQXOagPnSl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1153231.837154	COJc114SaYx1OtGCRh	192.168.1.122	54207	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FA4xdv2sJBPsARVJD4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1153368.921314	CzRlxh3Ye92YwBtRxa	192.168.1.122	54208	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7K8bk1pKNlAAAaHYa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1153501.255490	CRH8S84vMbk78gFj8f	192.168.1.122	54209	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6DfzQ25SSpXMu45Nd,FhemH44lOPIYEmz9j6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1154086.937491	C6jFSj1Z7EhevZ85o3	192.168.1.122	54210	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Finsx13CSJm6mzJyM1,FtJQvF3ZyoxGYyZj5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1154418.410789	CKI6m2GjnHZIb2dSa	192.168.1.122	54212	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbLgFEssTDgY4LsN9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1154555.460804	CDC5z74xEped8sCpe	192.168.1.122	54213	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLscm5bpStv1MeGy5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1154702.782767	CFe7N2mjeYGhTP2v4	192.168.1.122	54214	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxNkdj2LLfCkp4dcB1,FMmreP27rJnpjggLRf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1155339.458573	Cwph1vDPR7TtHVgCk	192.168.1.122	54215	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fv0wfD1nuqBq9ldeKd,FS9G8h1onD7LhdANG6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1155681.919318	C7vUjRF8ASuIlqaKc	192.168.1.122	54217	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FeTDsn2Lq4krpppu6j	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1155857.989171	C3vOf32gD2QORfWJpj	192.168.1.122	54218	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgKp3e3gVfIeI3s3E1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1155984.305391	CemBoJ322erORNwLjd	192.168.1.122	54219	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqafmQ3P4WIw3mgccb,FT6fHZZ8P8C8JUrfg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1156633.979529	CSZuRl4JylzXMQooO6	192.168.1.122	54220	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fk6wM7244HmzK6SmFb,Ft6brk1ZPNuTJNtlvb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1156912.437784	CY1zHq2s1ymYc22jCi	192.168.1.122	54222	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzpRJU12ugJ6uOFU47	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1157064.504569	CcgJ6t4NECkkeetLXh	192.168.1.122	54223	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJhCg71uO4y43dJyPe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1157203.838833	C21UDJ1rK4s36mF3df	192.168.1.122	54224	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3F3Hv17EBQBjv766b,FzPFgwQkLZhZI6zt3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1157846.512117	C3Pmoi2KoGURE9oigk	192.168.1.122	54225	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMLiQN2wD9BzqQDbUc,FUJNGg4Q3UpjQmCtT5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1158117.949212	CCUx6p3qRhKaSBtVY	192.168.1.122	54227	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlOTFi1tx8X9l0QX8f	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1158258.981604	CVOHbQ2pJMMcAEeLM8	192.168.1.122	54228	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHUIdsApOXfn0p2Pb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1158433.306900	C4QVyM2YtpkO2kFva4	192.168.1.122	54229	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVS4MQ2nTXObtts8M6,FJILbA4lQbSylQhc6i	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1158781.467527	Cyg6Jl2GMJkPU5ddD1	192.168.1.122	54230	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FA70F43g1efX15Jxhi,Fp3p5rTZcLQj4kBhd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1159075.941542	CjH3UA3q2vRoXuAge	192.168.1.122	54232	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0v1rM3DEN2lKo0rRa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1159246.011065	CWanur1mKENfhi4tQ6	192.168.1.122	54233	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FzhFCF1M4pEryW7R27	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1159384.343884	C3GK5n1YdkF0t2oml5	192.168.1.122	54234	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKUPOm1AyaNgyoHfz4,FWPO4G1s77VkwFipug	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1159627.523417	CKvx521VdGT7Z4Mlwh	192.168.1.122	54235	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FT3srF4wsANXSMsHnd,FR41RC6ATQGAKEJvj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1159900.013480	CN8X5e368OElN7fFRb	192.168.1.122	54237	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FC9aeL1rlKthXS8mk6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1160054.082753	CfxRqo16fzDRkW7RFd	192.168.1.122	54238	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLTL4H3qMhmsgQ34L8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1160180.408701	C0Om9t4D1NWE4WpzF7	192.168.1.122	54239	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLx65e3p62fGRg1HHh,FKz5N9MZeXS2OOat7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1160533.576497	Chz3T14y0mf5i5C7D6	192.168.1.122	54240	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqWAu34UjaaysZ4cDa,FsUrjA4kYfTP49HWJl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1160862.057526	CVIqMnWA7PhTRkI31	192.168.1.122	54242	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FL1o9w1GniYOyW4UX7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1161036.174385	CqAZ9Z3IeoFWC4X5kg	192.168.1.122	54243	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fy34oa24XZ9AMLfKp1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1161196.499336	C03FHz2C0UgZ828VC9	192.168.1.122	54244	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAOe0R26n8DQmrRGlh,FdFQvvmc2C0Tdxp8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1161848.166535	CyhFIm4mvit1YKM961	192.168.1.122	54245	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhfoiZ3Xd6CgzGEu6d,Fsd2OZ38q6hZsEbq18	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1162168.651726	C8UYBlqwBgQNQWMWe	192.168.1.122	54247	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FjPVeY3vtditVCtG6k	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1162330.716017	CnBmnK3nXHQrzxB785	192.168.1.122	54248	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKKFEmSvbqdecAeGd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1162491.040672	C7KTH7QlgQgYjQ0Dh	192.168.1.122	54249	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2JRDeHiy71pkScwk,FTRbAD57FnPJhPrgg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1163093.717473	CO5L9A2i6NvAuEWobf	192.168.1.122	54250	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrjM5z1mYqwntVp5Sh,FA5vCmdt4kDWQ1UF	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1163355.200383	CxkTDZ24eV2Kmv0Rt9	192.168.1.122	54252	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FSLvUlccvryuEwxH6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1163501.279802	CtVJ8RW20mV8bVpk9	192.168.1.122	54253	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FsN42iyxHgvDKnmga	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1163665.610080	CMdS0u2XK4Kgl9Kv99	192.168.1.122	54254	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRVgx54cE0vs3h68a4,FsjhGv24I04bTP7nLh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1164271.290351	Cr9ZBMRT8hKf0f7t3	192.168.1.122	54255	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1sgMN2Qaj52Fd3i52,FWvzmgD2wa4pqWd69	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1164600.726003	CLWq2CgEa2OoelPN2	192.168.1.122	54257	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzRcT01KEo99ss5ORb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1164734.813157	Cjtlwr1eh3TlUZHeF8	192.168.1.122	54258	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F49DTObwKstiaVZ6c	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1164884.151502	CL8S5Y3KPjbq1yTt4j	192.168.1.122	54259	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWg4Dn3qIy4L9yRIle,F19srNYGazBeMjsD7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1165525.824149	CYGwtgo6bd5QUrl7a	192.168.1.122	54260	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfZ7NS2s8pBqxmNWyd,FfO2T42iTg6hOCpnbk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1165870.275722	CjTIY21A3htMtm7Xa7	192.168.1.122	54262	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRp6yA4QZGSLrmVXH5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1166032.347940	CZa57521vZohlWq7Ma	192.168.1.122	54263	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPeViw31zfCRGIWuL9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1166191.681839	CZo7pv4Ooa8Jx4e5Xe	192.168.1.122	54264	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNYtBmQ3Uh9K0t5F3,FjbpYh12wg2y2Kffe7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1166765.356343	ClGQfi1NnLFISYzUq7	192.168.1.122	54265	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fcl0w73gKbTh0MV3E1,F1QPGr2dy91spMm9P1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1167082.855460	CsIz8T3HzhsUJhGdTl	192.168.1.122	54267	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FkoFmG1GS4ZhjvR34c	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1167241.967254	Cgc0nS3uwZdhXZ5p69	192.168.1.122	54268	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNZJGa4VBhOwhnZdrj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1167402.292012	Cdmyej3sJG2H2R8Ywe	192.168.1.122	54269	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8Dixw1s0gmUNfNNC8,FehTaj2sNbjNwYKAq1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1168051.966649	C6i3nk3eabJYnfdFwk	192.168.1.122	54270	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgjtTC3DmcqAY7r2d6,F9qJOOuQsdiQHSGIh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1168338.449599	CCeOrbHqCxLeaEZng	192.168.1.122	54272	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FsWBccF4bJnFSsqfa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1168477.523305	Cg1DmH2iSEQH6Y2mbd	192.168.1.122	54273	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FFh8LXvRt3obN5cJd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1168609.858218	CkyG4FYAccBUlRXoa	192.168.1.122	54274	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyEmOm3uPofVI6uNOi,FUqV9h3MhHuP2aC83d	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1169261.535292	CERVSs3CAR82ztl6m	192.168.1.122	54275	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJwBPc18xCvpt49h0j,FuC9R943sSOIiIFiJ6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1169552.996337	CYmKZs2UFDzFUt0J7f	192.168.1.122	54277	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVtmPl3NdRbQzcay7i	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1169687.063034	CM17vD2LzHcLEGuVp6	192.168.1.122	54278	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqI2SE2AvpnAgUcBUf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1169827.389476	CaU2Cl2HmNTxsHVXSi	192.168.1.122	54279	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F92Giw37KGJvQgmqf3,FnJZd93nCqvOxFxMXc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1170404.057934	CwzTA11hlrPAqc84za	192.168.1.122	54280	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCP8is3xr0GEsuL0c9,FbN5dWLDQoBd18QW8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1170667.507151	COANtK1KBCQgFCNR39	192.168.1.122	54282	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FG7Qq23pD8fxzRTOo5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1170821.543880	CPCu9dW0Fa37LckKk	192.168.1.122	54283	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtVcYo366A1EcebMKi	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1170966.626756	CH77pn8hNdQ64jP47	192.168.1.122	54284	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMYxcn3j0gwayUugH3,F9xrZqauHmVurUSQj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1171529.305711	CoEFGA1royD4vUAAUj	192.168.1.122	54285	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCPTXOF8m9JaeLGW5,FC01cE3JzZBJF212F9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1171799.796286	Cex7JG313m5MMhgBGa	192.168.1.122	54287	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgMwVz2NgNRzUp6TMe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1171940.903126	CRRZq72tAzsbz7JX22	192.168.1.122	54288	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fx7uP5tmtIndRowLe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1172096.230922	C6ZvwB2LvnXUVRqhKj	192.168.1.122	54289	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQ9YZO39Jdfnug1Zyd,F182Ve70YgMIQqtJ9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1172414.698905	C3Xodv3mRcZbYLZvY	192.168.1.122	54290	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhUNisNQG1cwwDOH4,FfbIk11d3YIda6QX1e	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1172719.175293	C0gFOxCUczFQwfxNd	192.168.1.122	54292	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FoxKo72RxCqxdzHyXe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1172869.247926	CjiSAD1Ob0meq1Fcc	192.168.1.122	54293	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FyRVxo4HbDwubsZPw5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1173014.581608	C528zy4lb45u0Zrmd	192.168.1.122	54294	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHnX1q29EsUXlCSUrl,FXGhSf2m6zfBwgie2i	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1173565.253055	Co0rfp1UZHU7F8uOIg	192.168.1.122	54295	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjyRlc4FqhUSKTOMa8,FgiwS73n0zQ4bZb62h	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1173910.755842	CFjaWB37mXGrT5Uum9	192.168.1.122	54297	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRUjjA3TqR6JXeuyH5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1174062.873654	C4F3ft2UvEUpmV3rwg	192.168.1.122	54298	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FyFSQ88DdaaSzOQH6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1174231.200482	CM45Mu1zXqJ958m5C6	192.168.1.122	54299	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fdqerq2hTwN9HnB6Ab,F3BY878lY22LEDJba	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1174822.881165	C3OOF7Tjsq3e0jHLg	192.168.1.122	54300	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fo8FZo1Z1j50tRGdFc,FbqVJJ2uud5ySF2qu2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1175157.365835	Cve3KTIVq8TvwaQqi	192.168.1.122	54302	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVrWTQI6fgZmL1ad	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1175284.450402	CgUQf523TDEM3jCUI6	192.168.1.122	54303	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBnkgC1XLTUfQsy4Y6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1175418.777817	CO67Ug2mLh1KbmaUai	192.168.1.122	54304	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDUg6B2ElabicmFqh1,FOvQeD18SSnmC9nnI8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1175691.950691	CUz2bU1Ytipx36oML	192.168.1.122	54305	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7mZdN2mi6N4hZOsV2,FsVH3LfgBiMbZEWwh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1176008.432047	C7Mr663jFvz7G82bD	192.168.1.122	54307	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5yYtj05WHQXe7mtf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1176160.550729	CtpBnv21dsytwBfaNb	192.168.1.122	54308	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fs3WEl1GdI1wnJ3c54	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1176312.873319	C4RE0aysVxFTQixL5	192.168.1.122	54309	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrkmE732rI2y0x5afc,FDC2sH2sfKvhXJqCka	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1176932.544426	CPDJolkQN27ZwJzKe	192.168.1.122	54310	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLMZDR1KWsSNkiFXMj,FPLSXm1WaRSCNI1tM2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1177228.012560	CiC6NH2lRgVf9XSFM6	192.168.1.122	54312	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fz7pqx1YDhRZHUK2g8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1177386.122449	C6IGUR1vUZ3VF2CCzh	192.168.1.122	54313	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FpJiXp38TicB1Cc1E2	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1177552.455409	CLxoJj4hhUbRmQcl2	192.168.1.122	54314	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMflCM3bMtqFul6XPc,FIlW0sj5ZuXT91iqd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1178156.133627	CZPTPx1EpjomWi6nWf	192.168.1.122	54315	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrJy4UDfcl2RLzzt4,FjfqjU1ETLHHby6RL6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1178492.630256	CYzHGj3k200cC01Rg3	192.168.1.122	54317	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDObze4aqaVHfc3w07	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1178656.719171	Cc7ORC2XUa96q31zu5	192.168.1.122	54318	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBCYXE3gmVkCHelRKd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1178812.046634	C3z6xn1al4NBIV9Qx6	192.168.1.122	54319	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnCLJv4YAkxydfTO7g,FOGOwe38eWOJav107h	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1179154.208649	CGIWXfrM3mAhOfYR3	192.168.1.122	54320	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8MIov30oWpDViZFF7,FFyjelvp1mbWrFM8c	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1179426.688524	CzzRSVZajPij3DIn9	192.168.1.122	54322	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F48Kav3FTaop8WbLJd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1179557.754549	CQy9SY1PFRgE2ylFT3	192.168.1.122	54323	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwCit5IzmZRLXsrxg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1179686.083035	C6WEyJ1zr33SKB2qYf	192.168.1.122	54324	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzOWwT27XZAscw9hnh,FgG7Y24QTzZWRkmKid	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1179945.246236	CfxqcT2tWATECej2Q9	192.168.1.122	54325	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9T8Ud1juJwBvkT5U1,FkBUEz1O1Zh6zGzIu4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1180191.726318	CCnZhf10ZKEZzn65Qd	192.168.1.122	54327	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fidfs62XzWoKOuRgO5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1180359.788363	CNqrpQ3k7AzaeDaLD4	192.168.1.122	54328	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6fJlK1R0819F116t1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1180511.119700	CwPEs5O1NInTCTQX2	192.168.1.122	54329	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9M2WeDYnAuXy9Blc,FsnBC32oMlnBrflHvi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1180758.295052	CRzWToK3PRlEj6zpf	192.168.1.122	54330	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FosaPu4esTar95a0ne,Fb0rHs43LCkGpUHBDk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1181058.763461	CzR6Bs2bI8xP2m6Xs4	192.168.1.122	54332	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FubATlj1sDj4J8vli	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1181185.814957	CcGJLx2ozUaRhZtROa	192.168.1.122	54333	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxLtXs4YetUCdDZbM9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1181338.298795	Cg59OG1LFkNyfSKibj	192.168.1.122	54334	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlUHip4XNwzwHEh0nc,FTPx8SLOBiuaCLaz1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1181693.461081	CU21Ax1p8wx20kxbRf	192.168.1.122	54335	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEbrsC4pYp3abwiYF8,FYsvtw2wQkurgtoMXa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1181986.916527	CaN9aq2gicCAckSMCg	192.168.1.122	54337	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6CY3I2t1yGpvFBiRg	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1182142.981379	CLuredLGIgGcCnwt6	192.168.1.122	54338	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fpj0jY3RovhAJcryq5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1182288.314695	CX7cjEMHTizMHBmT9	192.168.1.122	54339	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEmBxr2vSKL2u6eQPi,FitbRrIsBxxhVyNbf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1182879.995515	C9mfyA1RPd7AYvuu66	192.168.1.122	54340	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyjQmU1hrJJxFU0WMf,F1I58t34FvAnUiV1p4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1183209.471908	Co2Jf02R4Wc8YNBq8f	192.168.1.122	54342	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8Mlj73TmfZ0i0IQP2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1183369.545022	Ce4Adg4LbdfKuTEpej	192.168.1.122	54343	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Feim3H1XJeGJiC1Pq1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1183532.874502	Crrpz9KyRLMoOJUO8	192.168.1.122	54344	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtvVjIHjU0AQtlB6e,Fp4jjU1dLaAxF5DZeb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1184079.540212	CFBhGk3TD7HX2SmPq9	192.168.1.122	54345	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBdahq2ly1itsX8Dji,FyeFbB2WMMdbn8pR43	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1184346.993480	C9uAW612afn2clRr9e	192.168.1.122	54347	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FkhAq56R2YLUcJ2Vl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1184472.079974	Cv5hgm3jfmVa7cMX51	192.168.1.122	54348	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdzYKeFqpQcryleYg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1184618.444780	Cv0qib3sVoiOHtGTXk	192.168.1.122	54349	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPl62S3kmMKlPXCeal,FTMm9UUKrZsI1IRy9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1185192.109968	CWFWX01tmrub7opfV1	192.168.1.122	54350	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fge18A49OfKTe2BRp8,Fuln02DtRgf7CMSZ3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1185510.581266	C59Hs53hLi7fw3RSOk	192.168.1.122	54352	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F65Cw322ApuT60tuT3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1185654.660632	CWTRPi3iRf3krPdlta	192.168.1.122	54353	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJEmNK1MtJyDPkh8Xh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1185779.994972	C7LhdT2NAbky8VDkW9	192.168.1.122	54354	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfWtIuFZiz2MeF038,FBw59C4akUZR4npKbc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1186132.161220	Cc3e7I2nYeXmlKUEPh	192.168.1.122	54355	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTesM32lm7c4vcpHq4,FLbXFf4YKeq8Y6Teek	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1186419.631292	CdNyl71jDyL1EkalHk	192.168.1.122	54357	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBN02P38vkY5Or5HD6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1186582.724980	C1dqvd2aDF2AAPtN9j	192.168.1.122	54358	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWv6p32gEpXuat3l3e	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1186725.053750	Ck5Blh2RXbdSkaaANd	192.168.1.122	54359	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8G7Td3Niu6sc17nqb,FBzqjr2RZPfaNhhSk5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1187301.723066	CIrI5o4z9K65UVUA0e	192.168.1.122	54360	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fcye6f4fhPFZrJN7N7,FedXi04LjYUP5MOHua	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1187628.193388	CwW5Cl230cKoRiSPc1	192.168.1.122	54362	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FeLq0F2V2QWgz1wfB1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1187757.253547	CzgBWOzrRaXUv272c	192.168.1.122	54363	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQsBXty7lnSiS4Z66	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1187918.570189	CtC4Kn36KIZpkllC55	192.168.1.122	54364	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnuEUL3KawX9Mk30ne,FP25S83b9n4pmHtEB2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1188493.246417	CkX5PH3RpmKcdAdXa3	192.168.1.122	54365	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFMqcq2TMWHtapydyj,FAzvue3gRDBr2AnvOc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1188819.712767	C5jSDr1AL2MRNz38N5	192.168.1.122	54367	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAB2iZ2SLdm0V7ACih	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1188988.773926	C48xvS2FzXrk4UKtAd	192.168.1.122	54368	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSEZIW3fmRhnEZTnD6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1189167.095169	ClHCY84kTR6jvShIz4	192.168.1.122	54369	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fj8s8u1m02E6zuIZOg,FuBuRV2O9OIYrFksW	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1189760.768685	CLPLSjJUQa5rnXIf6	192.168.1.122	54370	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNiY8T18lRCNL4PQMd,F7Q6i4j7aUhs0JRDi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1190058.241226	CQWuJwudVsa3HiiO6	192.168.1.122	54372	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FsNgOq2gJwgFOzSthh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1190188.308940	CPH9Q21z74qvjzzBC5	192.168.1.122	54373	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgpWYx3vEhzYLcgd1b	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1190354.632497	CpyQ01WVJGJUcYUA3	192.168.1.122	54374	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfZ0GJ3X90f9l89onf,FIGigA2W5dzGXRASle	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1190980.312016	CTkBHw24dDSk9sDxNi	192.168.1.122	54375	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fy8ZcU1xee9GeHClpd,FbrfSW1FRVn0dXYMxc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1191249.773046	CnVW9Q3G4BR06jLpTc	192.168.1.122	54377	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FeK5KB2lC9JLDzpfGj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1191425.838275	CYgi1P12YsVw85JW4b	192.168.1.122	54378	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6YVTf1mxYEF8P3ITf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1191561.167213	CGp4pQ1QCA9NdFbI02	192.168.1.122	54379	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVjpaE4OxHuhddKN5b,FxcQoiPbQ4iAKP814	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1192189.840753	C9yI4KederePd8UO3	192.168.1.122	54380	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKVJ6F1MYnZvLzeU4e,Fzx5Ew2IJa0nFEp8ah	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1192533.311025	CQNhOq11r7H20hF5bd	192.168.1.122	54382	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FesJWo2Dr7JBeAPrS6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1192700.390713	CxImkc441CoBWddD85	192.168.1.122	54383	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2qxDq3F7yvFQ2Q4Uh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1192827.729042	C509kY2khA9M6SWObj	192.168.1.122	54384	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSnSPm2pKm3oRmAdeb,FZejWL1hhbG0Mplu1j	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1193429.403753	CciFzk1hDoGSODFu09	192.168.1.122	54385	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fg60KB4SmRk7fyeJKl,FSE8lN1vH6PWIaXZM	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1193705.860117	Cify5w1cbC3NOUekI6	192.168.1.122	54387	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FvvB3wfTbNLB21b6f	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1193878.905337	CWQh7f1MNHEPrMcCkc	192.168.1.122	54388	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPqL2q23LIZcXh48W4	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1194029.235638	Csi0AW1J8j5gZJqA86	192.168.1.122	54389	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCq23b48PuIsp6Pwg3,Fc62Pd4ZgiU21IJ0g5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1194621.917855	CaLmSQO6wowfHmall	192.168.1.122	54390	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fshg6R1VKDXblEDMyi,Fu0lih42mQNPU7EzN2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1194922.379213	CjGYN938KgXJlNPtIh	192.168.1.122	54392	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIfkFv2wDxmnr3Jyri	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1195061.435404	C0X7as3Oi90fSYE5L7	192.168.1.122	54393	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FA4KMN1EENa23n9Lm5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1195190.765982	CAl5mk2RhqFHGnlgc6	192.168.1.122	54394	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmPNBkqz12W3FMQTc,FFoC3C4R1RLTibz3e1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1195788.436509	CsXNy14C0I9AjptaT2	192.168.1.122	54395	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUtAyQprrUtrCKDGb,F75wTK38bTLfjNKask	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1196096.905060	C6FcYn2vDBUyl3MwD5	192.168.1.122	54397	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZH0Fn3uZi6CppRQO6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1196260.969897	CS7lVr2VMkbbVrDss5	192.168.1.122	54398	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwXh6WCDKC9Y7A3R	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1196432.300591	COK2Yf1klZybDzH27h	192.168.1.122	54399	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6yzsYBgrHM9Htbxg,FPz9I92GQroRPhQoyb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1196723.468604	CJ9ryG1DRi4Rg1nFJ6	192.168.1.122	54400	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJzQ2NNaFzzdNQfV,FRVLcG21kV39VgZuMg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1197342.404390	CRJQRM2IyZJ9ZqmSJb	192.168.1.122	54402	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhsTJ14dQpLrgeZHy8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1197514.463222	Ce5I9j2k4mrjAJXQde	192.168.1.122	54403	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8jTMDqxLfMI9Z7Gf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1197686.793229	Cj94Vk3uDAaJmJTi18	192.168.1.122	54404	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fton774OTBE08yxeSk,F0HYax7GRgkq7gqt8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1198249.483518	CzNfyz22tarsJipVkb	192.168.1.122	54405	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJb6vf1js2XEPOal77,FebI901426dBpACeKh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1198592.937315	CDuFYL0FIeQNTjoD3	192.168.1.122	54407	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCPspy3VONneagHrA3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1198731.992673	ChiDGC4h1Ta4tlrCG1	192.168.1.122	54408	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FsZxJW2LtzsgxKjhy	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1198890.324813	CtJlRA2hl8jVFE6N16	192.168.1.122	54409	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBhu0I2UmeHVmXv6Ff,FH9vjJ10znPaShWu41	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1199234.490430	CYTf3U2c1HZv7HdEt7	192.168.1.122	54410	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FS1y5A45rDyIOre8V7,FBOzZH3JEaWSsXacx	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1199520.961473	CxmVwK2nKJWStrxZNk	192.168.1.122	54412	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWmu1s1hkKgEsxWVZ4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1199681.027511	Ci7fPP1rj3ZkTkfdC9	192.168.1.122	54413	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fp2YQMH1lYVG2Bhm6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1199856.353798	CqFiqZ3ilRie4nhtH9	192.168.1.122	54414	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4xUbH19v5F48x372c,FMhRJL1lLuP5mTBRl2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1200398.020120	C2CJjXCfPqFRV90le	192.168.1.122	54415	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fx7yKe3Wi4vTRpiRI5,FHQBSY2o65HhybNAVd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1200691.518649	CA7C2G4Z7L2pcHfCf2	192.168.1.122	54417	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYtpKu2IESCNq8SDC6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1200850.639666	CxZfSY3AFooXsZC3D3	192.168.1.122	54418	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4Pdnr1WipSw8pfN5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1201003.964270	CCGUeO1ZRPIxx1gkn2	192.168.1.122	54419	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0tXIiTe2HO56zHIk,FW4dbH16YNbBNncyCb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1201618.627571	CYAZT4259mKSnrxKae	192.168.1.122	54420	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTfBKv4imPOnx6nXUa,FDFglB41u7rulFlmB	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1202189.590225	CKiXARoce21euagi5	192.168.1.122	54422	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGcEru3OunNoYpRJTc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1202316.657788	C7DsBy33QajqKz0pQ6	192.168.1.122	54423	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FVyC8q1n5k9yNIYDdj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1202468.027512	CrKrEB48IyUpGf2O9g	192.168.1.122	54424	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBywFR1EigAN6DGae3,FegLgN2bs8NEMKaxx5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1202748.191334	CgyexoX1icVLJbvpl	192.168.1.122	54425	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FItdra4v4FUScMdhWl,FF7BsRU18eDYP9Rq7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1203045.670340	CmfBAn1Od8MPVnIMkj	192.168.1.122	54427	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPxvU21NcSEVPSFDwl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1203219.755356	CeiwhO1rkkumqJ7pvf	192.168.1.122	54428	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgudA1tlyveofj6hb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1203380.079794	CZJFLl3K6zRiTmERf	192.168.1.122	54429	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1YSBU1LvzDlBTHHVc,Fkz67E2YLcdXUfhdAj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1203680.251797	CBzxfB1VrMjgNhIcU1	192.168.1.122	54430	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTq8FG39sYMP3p2GVl,FQMyjP2NiPzT6GNapg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1203942.736594	Cu3FDi4WIGUIWN0xE9	192.168.1.122	54432	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F089wH1Cd4xaPz2MY9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1204077.808649	Cp8V4j4wy06YpeHDYc	192.168.1.122	54433	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fkplmf4EP2hi5Cns2a	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1204247.126646	CY7qCZ31s0C85GxPOl	192.168.1.122	54434	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrRc3nyl98r0gQaE1,FW8how2g36uFhGdXf1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1204591.291508	CM3VUQl3L0KPjsmYi	192.168.1.122	54435	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEBtz32djCE2w0mzbh,FHAn7G1I0CKCYcNs9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1204846.788353	CYaeDn3vJD7AlXhvy2	192.168.1.122	54437	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWxBq32zR0u8FLdrvf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1205022.897891	CzLVeC0Ihd0Zjniq1	192.168.1.122	54438	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9WLmN1TwFNCj3zWv	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1205175.230945	CI4hRz1JV0QDspqB1d	192.168.1.122	54439	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFHz3p2fh0OKe9TmKg,FK4GW04gkiTgPDgWvh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1205769.896542	CS7CDA1bBv3ok249qk	192.168.1.122	54440	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNirei3PiB7w6CHex4,FrzUH91BoXpK7j2lf7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1206101.348193	C3wNMA12QJgIjTnFAf	192.168.1.122	54442	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnXEmPSLxFqGJNi26	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1206279.424461	C6iXFw3wiErU1Uz4ca	192.168.1.122	54443	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FnAmV73ZJWXya4EdQ8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1206433.750585	CJQZdN3yVBwBR3GP4f	192.168.1.122	54444	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fm4Qrs1KZmUGAiYGNd,FGmzZ7qDBu2T827ld	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1207002.417494	Cy0rm33U3voXTXmCG3	192.168.1.122	54445	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcbqGe1dg9unHcMZ8l,Fsm414X6b8TVmZpak	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1207303.888410	C6O9Fp40mvvW9OFuY4	192.168.1.122	54447	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fc2U8e1wHedS2fqk34	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1207427.995284	CLdxRz2AkPPGcc3mkg	192.168.1.122	54448	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLG4T63EzmTMbGt7kh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1207551.327332	C3qybWGZyOcf5RM5f	192.168.1.122	54449	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3Ey5m204tdttUmwta,F7M4bs1i8jKUZaaxr	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1207812.803266	CccTHlINdodXlyy51	192.168.1.122	54450	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6LZlAwThMYlKV2p7,FpQZU44zMjpK9UsPG9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1208133.290528	CiMTIu4BZPPx2L0R2a	192.168.1.122	54452	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fa5kK84bNHiItmJAJc	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1208283.395241	COkqSc1taQ9txbbgXf	192.168.1.122	54453	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7T61ohElEjQRKRV8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1208439.724629	Csivy7BhrZRt1bWJl	192.168.1.122	54454	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxOFJr4tAD5bgQETBf,F1c6jn3YtwoqmCcbwj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1209017.395273	CyBgo21VKBqDeGNHcj	192.168.1.122	54455	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1LhtE3K5XbogqXz0c,F3b4SM2zLqIqi2oePk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1209280.855786	CQCZC820PKwcVMTVkd	192.168.1.122	54457	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F43xsb4hiy3Q39qLfl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1209432.928720	CK4k1B4iJOahTZ3ru8	192.168.1.122	54458	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRZ3Tl42zcuF7dFN7j	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1209558.273363	C130k24GviJEQdH105	192.168.1.122	54459	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1ZMLl2IgutBefb0Tl,FDTPv32fqpCXhwgu9f	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1210144.937377	CAeHg41oVtYke7sDn4	192.168.1.122	54460	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fa2Zp345Y0KvbldIpf,F7Evmc1B0XqSGJpNSe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1210451.401635	ColNxN1fHkk7dd6zQ3	192.168.1.122	54462	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDt9mR3gMIpaxYoOu1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1210578.436365	CIjo3910uvCA1Tywyj	192.168.1.122	54463	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FT9BV92WnnNZhMfM2e	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1210707.775395	CRolE34avQ0k8K5MBh	192.168.1.122	54464	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOxPkP6bDaVzwHGpb,FHiYfi4VGLIWTdPkZ3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1211331.462553	CFCt4t4O0OaWKFYv53	192.168.1.122	54465	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYeC9N3f0LTRnxSmJa,FvmTFA3D2UDkkjBHPg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1211886.433311	Ch91WY1QPvPB0sLL39	192.168.1.122	54467	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4FeRS2reDqFpzXTDe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1212043.012356	CzfqZy2QoWP1QjvNi	192.168.1.122	54469	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlZsem3R5RspHtRH92	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1212191.336890	Cs5ePc1zRacC8bgVCd	192.168.1.122	54470	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7KOggKSZRceRwkv4,FGxDKP1xzVDxyIRB03	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1212786.053142	CsIFD62wyspP8v0iP9	192.168.1.122	54471	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnqpHx3ukR6yAZFhKj,F90nC248zP0lYKrf62	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1213067.530455	CitHo645rIpwUMoGV1	192.168.1.122	54473	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7PJwxIbqOHXrB0Gl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1213247.634124	C79SrIbsFlftbFKT3	192.168.1.122	54474	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fbuby81WhusbEfW7xk	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1213413.004264	CxzENB1VrjzYWHcQIj	192.168.1.122	54475	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUBoXIZ5COKuMLaA6,FLMdm9477YRimJrYVl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1214037.683254	CTQHiV3Gqma7LjUKL6	192.168.1.122	54476	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fw8sDO3RFVG48NXeC2,FjbN1f1U8QiRWnOmTi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1214680.660881	CKptfNXnlqLeHaSI3	192.168.1.122	54478	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FkEONk2nCkMATpqO8e	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1214823.770216	CN3y8X3zc32tut15y7	192.168.1.122	54479	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FzoGAp3xqZRkug13d3	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1214987.097802	C4WtYd1ODP6Jm9yUX9	192.168.1.122	54480	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVAd8o4rCS5HOrkCja,FxrWKR3Y4EMgjc75C7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1215305.265963	C3RVwt2Xt03Xz1RZk8	192.168.1.122	54481	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8bfGEmFLef4H80Fh,FRgd1W3rEtWy5wKXRa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1215633.767286	CgzAN8r4zw6i2pSBf	192.168.1.122	54483	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlIN7obMI5NLEtPl5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1215793.864455	CGNQFo3CV9IVC2BcX2	192.168.1.122	54484	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FuVmo84QSqA6fCqsC1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1215959.195987	C3GQ734fHzEvF6C75j	192.168.1.122	54485	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuXXAe4Gc8XwnxjAdd,FKh942SrkIDdtvVnd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1216245.367356	CAOf9H3wBQ6qrScTn1	192.168.1.122	54486	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSL3tT3adVSpzZbim5,FhBRKw4RBteoDBc5Oa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1216503.842037	CVmO8Q2yS2klax4vfc	192.168.1.122	54488	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTlrwE012BqsAguU	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1216637.938387	CXMA5h373fe2vJoFB7	192.168.1.122	54489	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKMXD13o6Igrza1vNc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1216804.271223	CSfY352y142Pr2cahg	192.168.1.122	54490	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F10nWD4h5X5emqYY97,FdXZ9V1DLN1SvNfEWe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1217431.933327	CiL61P3YjaO8X3KnZ3	192.168.1.122	54491	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzptQv3ESnSxB3qsza,Feg22N3sZkyHphvxb5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1217722.419498	CT0VmE2ApkfQxgqRo2	192.168.1.122	54493	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1eAkD18VdlJOxvDah	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1217891.500304	CUAIBu49xvuqWmIwg2	192.168.1.122	54494	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIrVcg1uNyrsfJNEjj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1218027.830115	CkPGESdxi4YksJzJ3	192.168.1.122	54495	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcKVyg4ttguitsVjNf,Fr78EMZC8eaVBzsse	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1218652.498372	Cj6BnF2MGxaLvSVdJg	192.168.1.122	54496	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6uuRT1Vwv6xheeoja,FzgJz01dG8Bw9oea4j	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1218967.969323	Cy3smU16fTr1o8yaO9	192.168.1.122	54498	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FefXRX1c1CElokbIPk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1219090.042885	CBjoeH3mYeZrNaLcDl	192.168.1.122	54499	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FP8ERD2jEHe69VcOM	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1219236.377709	CvjFie4SUed7Jbl2S5	192.168.1.122	54500	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyDBBA3NweQYUgpsN8,Fvs72A94ckZV0Vhj8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1219896.046318	CP1Dll1uYSGWLXjRD6	192.168.1.122	54501	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuVIxx5LgR3O4bvBk,FA1eFF3BLsP3NtwoN7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1220201.503617	CiGGv342ehjbLKiEC6	192.168.1.122	54503	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F9DuD32gyoqOUBmXXa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1220333.571489	CTewmc3ARxCYHOE898	192.168.1.122	54504	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmIUbH2CEZIMqObPwb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1220511.901975	CkQa5aHkX7K17wUTe	192.168.1.122	54505	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgOHv22zZ7BSgjEBg,F2cDvf299pJiJOJLqj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1220766.067257	CucdWU1wrJDii1HNbg	192.168.1.122	54506	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdXWOk4n52dcKBhED9,F7AZaovnJci6BCw1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1221057.536000	CKegI92IUONuoG8cka	192.168.1.122	54508	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbIpGh1lHX24GxuF28	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1221215.599218	CnwMIf2yB4uELyVsBb	192.168.1.122	54509	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FiqEe43xPFPUxAF27k	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1221392.928599	CwqqVcq6DROAvZrak	192.168.1.122	54510	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYlVj3vvSFbQRc4f6,FLqj7y3ZE1k8rmMc9e	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1221946.594476	CVT2ob46u3p5KUpcWg	192.168.1.122	54511	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdRACj3YqSmgBEqdK4,FsqVo3402gQCIgge8b	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1222270.074998	CYRGul10IL6QW3XcK	192.168.1.122	54513	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCGXrj2LpIwQb8SS1h	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1222392.150700	CJ65VM2HaUxauJqquh	192.168.1.122	54514	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fv8BdJNpRYq8DFWX	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1222515.482471	CrECZNEgq53NMnv61	192.168.1.122	54515	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fx65Hj37arVHs9hB27,FJp53u11qGvSVhhmoh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1223135.153860	CDBeiS37oIRx5yN153	192.168.1.122	54516	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTl7rJ2Ova4zAkGekj,FNO6ES1i4r5aCP2Hkg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1223401.623981	CIEcfd7xOVlqJUSb7	192.168.1.122	54518	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0sMa94Fnq1TBuww9h	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1223575.692205	CN21hI3bh9Q0l5O1hd	192.168.1.122	54519	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQcxLm4NP1EAQ96Jz1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1223738.020045	C3i76o2AOQbx51H8ob	192.168.1.122	54520	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIrGpqg3sLV55FkYj,FlsLpD1fMeOho6dJcf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1224296.693774	CqFUq44cZVXpolwja7	192.168.1.122	54521	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGGbpu4xKmwwS96N82,FWjT26ca5Uqp9VSQ8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1224595.163070	CCYqHi4I2TfHKkm3m7	192.168.1.122	54523	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7DnLz186mAMXRcjBe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1224730.242494	CIvyEvRsaigqkrC49	192.168.1.122	54524	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FFxthhOGbaMszT4m8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1224850.570630	Ch4hBn31oFrty2J8P	192.168.1.122	54525	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrTIbF2zcJa9EpG585,F8KCjE9GnBbVCT539	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1225440.257669	CxFsFQvWQZkD9jzHa	192.168.1.122	54526	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7qGpO2XBVm5Lzl4be,FO3RBr3nI7lfQJOir3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1225724.736818	CUAPco22M0qJwipAhc	192.168.1.122	54528	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FicChn3Ot0fHlgTabl	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1225857.833649	CQw5t83mK0GtHaax79	192.168.1.122	54529	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fyk3XkmTPgZWMVSl1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1226022.174362	CKbeZA2zqhHqAD1lGd	192.168.1.122	54530	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F04D7f1htMj3GP0Pbc,FPvF0C2m8jZIfjq2q6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1226360.350689	CrmoSb3G6hCV5SDX6l	192.168.1.122	54531	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlS2Uh4cgccoIfueT3,FSG0Qq2gjAdkmd3Wud	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1226685.835412	CQEjQg3zjCyO81GhSb	192.168.1.122	54533	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F34Ynf32T1s7YFB4n1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1226825.935696	CPfYbb3XqoOQh8jWv	192.168.1.122	54534	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdcxYx3QLCGDNmOBh1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1226956.267668	C4vlxL32lsxQLetRg	192.168.1.122	54535	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEhk2iA0A59XqQUei,FOitKwwQmCBgKw1ic	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1227263.439326	ChHFsP1004PRYRcoVh	192.168.1.122	54536	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FB3dnrBvWeDGdOPN8,FIFKI94JGofU8p1EP1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1227588.908574	Ck04v84biTPWSdNOBj	192.168.1.122	54538	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Ff7vxj3egmeKkLAGGi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1227730.967307	Cpzt0gd1l0gumt6Fh	192.168.1.122	54539	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfO8cR10y85dxhIjAd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1227901.296056	CBfGIa2VnUO372U1nh	192.168.1.122	54540	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxbVpw3v9lkgxHwlFd,FaK9cz3ojCBn6GTk04	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1228234.765906	Cvwrck3jhkDLDKiLmj	192.168.1.122	54541	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvyKEr4K581PkCoaue,FnRB5E1Ay6gwmSqfai	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1228539.226176	ClFKsI3lTV1QF7PWqd	192.168.1.122	54543	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLSO7QTAAJ930ykc7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1228718.296256	CGj2AF2x9vZEflQERb	192.168.1.122	54544	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fbnlpn1tIRo7FjShW9	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1228890.628639	CIDC4A4n3ToHmSuAoi	192.168.1.122	54545	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkxQLa40mexMXKeef,F9O4c81uFp2fK4J9C2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1229483.310742	CFTCXFTBwKg5qoD7b	192.168.1.122	54546	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKVLWrUb3nlnjXdy8,FuY4qDXTjhbndDMid	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1229804.808103	CCAOEa3UIKl1EJQiG4	192.168.1.122	54548	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FxCWOH3pia2cH0JqCd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1229978.919006	CcyQK74CL5SVITLYU9	192.168.1.122	54549	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtNK7D1FGBWQgaCKt7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1230145.252606	C4F3M54BWiN5VKhRG5	192.168.1.122	54550	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfNnV63fogpcLTwNsb,Fkqd3r3f0ST59rns4g	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1230474.435586	CgKrF32d4FJMcFku86	192.168.1.122	54551	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQvBAC4chiy9t9kbf1,Fpuwhz4lk30ijDByLe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1230767.891940	CjdhYq1ryjSQIkaM52	192.168.1.122	54553	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdWSqa7v871ktGPkk	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1230943.926412	C1uYOa1ktasg7m1xqk	192.168.1.122	54554	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FeiIENHIdNbQMhVia	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1231108.267733	CpXHJh1KLryaXojsOc	192.168.1.122	54555	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvUKE322BwRTaVQsIb,Ff8KAw3C48gzH2bAu9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1231681.941936	C10amK3Nl8OdOavF3k	192.168.1.122	54556	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOwsFF2oFgwcSg186d,FeoZng3ojfpxPLSODf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1231969.432446	CtYtHEpEEYbitzJE1	192.168.1.122	54558	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F02Eov30oZpRlQEy8i	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1232123.523182	Cuk6Q31YlPQbKkP615	192.168.1.122	54559	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FiX03x35rgWk4BkOdd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1232296.856181	CaxB831M2EffZQzHG5	192.168.1.122	54560	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5qu8y1VhNROjIFk6h,FTjgtlBRC7NRBOMTi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1232546.034131	CuMHVk4eQBw3Fe3s8	192.168.1.122	54561	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyFlsGX084G7M2Sb9,FtiYYW32vzHDugjNw7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1232878.521907	Cf5l1V13OUFBgs5rRb	192.168.1.122	54563	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpF3QE1L6ZWANS7jBd	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1233008.604717	CLCGfL3EuxR49p5qQj	192.168.1.122	54564	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fvvf0NNX0dwFLo5W1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1233158.935342	Ctnq422YaAZRqD7APb	192.168.1.122	54565	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYLAZn1kLBCwYBpqqb,FhLBsMXJZSrhbAPha	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1233434.100983	CZoDZh2A635jeIbvAe	192.168.1.122	54566	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5esD043W0V4mZb1a7,FpSIYw42hky8p12rYk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1233724.611000	Cwvy3g4s0C5IeZ35Hi	192.168.1.122	54568	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FEzgHz4EnJWuMcoiEa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1233848.733080	C1nx4uKV94j4U7fyh	192.168.1.122	54569	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FaLiBE48bIArkUqjhe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1234014.064830	CLFh5J2y9QINveGgO8	192.168.1.122	54570	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNfJm22sS9mbmn4Dli,FUAiYUIYVG2sSmK7f	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1234600.738818	CKe5v733KJXiK1KbEb	192.168.1.122	54571	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvGAUf1vgRDjnRGock,FRgYWF4wAt1jlj4W	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1234867.208172	Cma2WhsMYtIkCVhF5	192.168.1.122	54573	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FuvJ3t2lLfI7b4vQh1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1234989.303233	CdQLgR9QbvO9DkYGj	192.168.1.122	54574	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0ilxS1K8cpRHbHdbg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1235150.628945	CuirXuzIDUQxagrFh	192.168.1.122	54575	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEVQSO3DZaC9l1TIM4,FzUWOY258dmwn5UsD	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1235806.291905	CRAgQe4UKKH7LSyUWg	192.168.1.122	54576	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpwvsM12DpfS0Ydooc,FzcF5C2LWQBFALhY63	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1236130.769022	C5OSO72rxFWk2lMvf	192.168.1.122	54578	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FA7b663BlpFTA20Mr	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1236252.849731	C91lfj3vGVgbXKOSy6	192.168.1.122	54579	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FbrIXb3JFfIXkJw0oa	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1236392.184052	CJCOej4oq9vKrRCMj	192.168.1.122	54580	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLye87302MyJ6tkZR2,FfFiHrozVprhQbvU1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1236691.353998	CwkGjI3JpbRrmdknn1	192.168.1.122	54581	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FusOtf3qw9osrwBktf,FUQrev3i6hBnMX8WB5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1236988.841911	C6wMzi4XX0YmVBHP5g	192.168.1.122	54583	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F89aSv2CQxRE9gwtXa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1237141.927681	Cbrn9H2fJVcGFfR4p	192.168.1.122	54584	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcRRnkwYX6rDjzHC6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1237314.259799	Cp78tKB3vhun6yTCj	192.168.1.122	54585	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqHe7c24LacNo6tRR2,FGG4NaF1A5JI9l2zd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1237954.931042	Cfhw4j1KGG1jC9arRa	192.168.1.122	54586	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFMfFo1gCsq82xUJV7,FJkeAJCjFKX4VRZN9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1238557.889459	C7sOq73E1fGZrMjKv8	192.168.1.122	54588	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FxfhbB4Iz99KXap4ld	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1238709.973314	C0K46M3KkrDD8yEOX	192.168.1.122	54589	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8e7Gy0oCmTxUwZk5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1238888.301570	CvCIy14YjXiQQEmdwh	192.168.1.122	54590	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiSAFaisskmHw0vHk,F2TC4B1f8sHPjbbsAc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1239215.473636	CVuA43Rts1Sfw5u1a	192.168.1.122	54591	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKO3C7345VGkFrgaH4,FXehbLzrbsz7h0ds4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1239513.944917	CwObsV1CcXDOhggUil	192.168.1.122	54593	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgBkdg1ve0yP9Y6PMf	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1239665.025059	CbqwDh3nlIZm251Nol	192.168.1.122	54594	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZ43snXnbmq9IDzs	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1239841.353196	CTsqgFgCko78VhLm7	192.168.1.122	54595	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfzdrB1zTWFNBwIkI5,Fi3Oak2AJmmVHlLhGc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1240496.034950	CVK9YcVBPK77KZVN6	192.168.1.122	54596	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfRQZlk5xzggIucz3,FrS46D3AgArF5E4nFb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1240766.483169	Ca6aoE1ZDNAgEoosz1	192.168.1.122	54598	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcmOE74SLmAmcWKzq7	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1240892.540513	Cz98HV1dl50t7RGL53	192.168.1.122	54599	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSsX4i1xaIpZP9Wcea	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1241070.871296	ChWHSiOcYJgJRiIs2	192.168.1.122	54600	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0KT4r1l6EU1HSJGZ2,FoRHEH1gtk6Xb0DrHa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1241689.550701	CK03fA438olNnWf9ke	192.168.1.122	54601	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmI9gp37vkgIV3OYK9,FowBx74zJ4T3U6pBSb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1242002.027443	CrEqZG1U4aoaKm9nk5	192.168.1.122	54603	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHuAx6Cl7pSxL4pw2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1242182.106265	CtYrQc1noaX9ViOo2	192.168.1.122	54604	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPdV9p1E9SfvRHL189	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1242340.435229	CFVAWF3o1TI8rzJek3	192.168.1.122	54605	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fo0V0U1yYv3sgihzd2,FtJPJc3raVlvW8tx8i	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1242980.106140	CjqPbC3bbIvrUiOpg1	192.168.1.122	54606	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPXEW31kkWCzWNJKd2,FKwBTd4qv8O3C2aEnk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1243282.578080	CEDW1r4mUPkF0k5SZi	192.168.1.122	54608	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fq4YbY1v90WTL5oeaj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1243410.691368	C9gTCDlaiLiVlWomb	192.168.1.122	54609	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FoOChg45HqvNtB0NV6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1243554.021273	CGYgD94xauS2YixABf	192.168.1.122	54610	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8rfJz28UE77iIgqNb,Fnz77F35weFnYLFCI9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1244109.690179	C7QcnC33NROwlGNtB3	192.168.1.122	54611	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHX7Be1mzeWS835ckd,F5b5JTSHMyZ2dL9P3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1244405.156511	Cp4CPg4DmgqsM1c1s2	192.168.1.122	54613	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVTrBN2pLTrY1LCLX2	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1244558.241385	CO7iqV2k2xWkPb4tL7	192.168.1.122	54614	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUdiz03uJlYbuJ3QL7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1244736.571502	CWEo4n3XUHbMP6JvOe	192.168.1.122	54615	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3Tz663309GoDrGSe6,FeLpS54W2ZurrNVYie	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1245361.239551	CezOGy1dl2YLdDTJu6	192.168.1.122	54616	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTegW33sQ27Z0rOym1,FWzWMV3bw21z5YcWV5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1245630.718116	CTaXje27V52xVbuucc	192.168.1.122	54618	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgkWkMcbHIVGDZt77	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1245767.799693	CFrwQ1K5UZSbQQg2	192.168.1.122	54619	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBqHsh2Sd0B1Z0LzKl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1245940.132444	C4LTID1kRB5CzgzZ0f	192.168.1.122	54620	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJHt5X2xUQXu1jOuS3,FKTNy5yqxxeq8enwl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1246507.818070	Co02th2hdCdOWl4fel	192.168.1.122	54621	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEUMU11TIr6XzngGij,Fearo62rgRLOg7ueE8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1247088.793560	CRPT6o1h9HcP7gLxe3	192.168.1.122	54623	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1bcLc2T1XUSBonA3b	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1247233.908813	CRC4ic4TAukKT6TzW	192.168.1.122	54624	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FbttcF2KzAEdNnjCxe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1247383.235779	CUreHI1sjWlKdPGa3b	192.168.1.122	54625	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Foo5al1Djkmidoddhj,FeLKMF1iPwBut7ZlEd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1247985.903296	CCT6r61OmKBmHI2vM3	192.168.1.122	54626	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDj1l4P2cJto4BlP9,FTQYvK1X89sttLOKD8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1248272.370172	CE0Op61nMxOsE444gl	192.168.1.122	54628	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fk7IQm2ywBBZHx6mK9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1248393.434719	Cneawl1qC25pmXPgdk	192.168.1.122	54629	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPd9RDaPjMgl4JZYc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1248547.761477	C2xpJR7L4l3uIoqd	192.168.1.122	54630	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPRGJo1vKKUosiuJY,F14OcB4X4r5XsVZY9i	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1249206.428075	C9VwUm1iLXFTy6ebc3	192.168.1.122	54631	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpP9pn1W7EdDDWCLn6,FsArmI27eCssUr47Zi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1249507.926457	CmDlen30SQ8N3mMmN4	192.168.1.122	54633	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWM7Vj3CZ2WNtKEmEa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1249641.038365	CKPheZvZ3NYn9DxXd	192.168.1.122	54634	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FyjSVp1cRDklHKzeh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1249793.372043	CM13El1mE8b3YmrNA2	192.168.1.122	54635	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWqSRm1ymbgIe3a6s2,FBQDdn3fhQYuZRsFl5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1250411.060311	C2G9Ty3jFOKJtdjfBa	192.168.1.122	54636	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPI8834uIK5EWWulm1,F1arAz1nd8gv9PtyP7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1250727.524066	CAihOu4zCaqfdwvo4h	192.168.1.122	54638	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5pzZg4hyk8eKwdjS1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1250849.586143	CLBbqEFe2jAGt3AJ6	192.168.1.122	54639	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2B8oT1V2M4K7nHpic	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1250987.919531	Czw5Ip3C9ZHbX22U72	192.168.1.122	54640	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGcbjtEKnPDYDBdA,Fx51Vf1NMGAe8LjdVh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1251276.394560	CglhBg4vud7sWUDHn9	192.168.1.122	54641	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ff3C0t2YqFTf8dx3k1,FnBsFx1ZhHdA8jCdpc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1251602.898619	CuARdv1MewlCPtQgea	192.168.1.122	54643	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2FlTT2go5eAUDh8Ka	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1251783.009166	Ca4zB7SspHNwIfcc4	192.168.1.122	54644	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fbd9Lj2B0vGWMqfRha	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1251938.334864	C5peEu3qMZTkmZzrah	192.168.1.122	54645	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLRYFF4phqohcCzCza,F4BWqp14NVIRABpjz1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1252538.017987	CfwP3v4VKD4K7FVBpc	192.168.1.122	54646	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKpzHl3QIZPpEDq0S9,F4CwoN2CYf3UQErxp	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1252808.480481	CDMFLG1VAzgfeiOqAd	192.168.1.122	54648	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fle6Rx1bVGKqUXVipa	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1252938.539702	CL4NDAwq4lYp403Q1	192.168.1.122	54649	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FriCKiAIn2f8WweB6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1253077.894236	C6TtJ1jhwQWQCcreg	192.168.1.122	54650	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOfBmpgdbJIZ5OZo5,F5Fczq4zvGapN34Xi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1253623.570550	CEnBvt4ohB04ZnuODl	192.168.1.122	54651	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfQzPk2oXKy11M9BBa,FsrdIA14Fqh2GvEY3b	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1253910.070871	CZByBN2OCErnBOurs4	192.168.1.122	54653	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fn5YEV3wtospT6PS8	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1254079.169642	CUM9PX1Xk9U4lsc5Q7	192.168.1.122	54654	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FakcYp4vNiUEKkR62j	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1254256.499235	C2TH9l6KfzIcRcp4f	192.168.1.122	54655	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FunRwu2ssgEChpTXf,FRVOFC2AtiOFa8RRb1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1254878.172674	CvovH91vWp8SIwVF4	192.168.1.122	54656	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHVhlqr2FwjGCLDPa,FZ2jnf3wQyiEa4nBW	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1255172.672712	Caovqs3dr9tE7G7gd9	192.168.1.122	54658	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJJP2g1DVlmF9BEHR5	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1255293.816427	CqovM91caQnY2CtmVk	192.168.1.122	54659	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrevWE1UunihU2o6K	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1255465.157306	CXHIic1vbBlR0J0Uv	192.168.1.122	54660	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZj5A82CzoBl1pRjlc,FlD4FR1NjwHfYN7f94	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1256029.848141	C93eavLidmDtlkzBa	192.168.1.122	54661	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtwPWo2iOzUVFPPKwd,Fy01KS3GnRiIHmIpN	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1256323.313184	C3NJzq3VEVmWOhg9e	192.168.1.122	54663	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fq2j2C3ODYu53PdVl4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1256463.397788	CDxlG92yhaGTTV5v71	192.168.1.122	54664	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FjtOCB3dXJzxTyYMyl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1256610.724211	C4XhLo4XA9e4AxJIEe	192.168.1.122	54665	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPE5Vk11xKyY5BC77l,FOJ8JencXB2SU7Aw	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1257203.415824	CdvA62LW69te6Ii7b	192.168.1.122	54666	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhjnfC3yJUE7RNgGG7,FnZfsaYBN18a21Vp4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1257507.877457	CITonQ1EPnKlCTYMX4	192.168.1.122	54668	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqBGd343LztuAIYjHj	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1257643.934956	CXIb6x1WHQqSHSkGj7	192.168.1.122	54669	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FuXQHy3Q0Ok2PGgNXe	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1257799.262750	COnOQJ3CYwDcj1CXKg	192.168.1.122	54670	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhXvm41ubuyCSzYA4d,FH664e4aJoBPVyVI1f	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1258422.939478	CJCfrXDBxWiZaXW8e	192.168.1.122	54671	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqybOg1DZpHBPViF58,FZQwRa1sG53MEzl5j4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1258695.428552	CtJO5Q1A38bcbIMnqf	192.168.1.122	54673	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgiM3Ft3p2snEYn5f	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1258874.572118	CghC48BOFVn43C3ie	192.168.1.122	54674	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgZ3rW544dzbNQrZc	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1259020.909312	ClXq1DgNqzeIVqeRd	192.168.1.122	54675	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2zYfZ2hBdCLI60C34,FXGIlK2b3JABVsUem1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1259562.588466	CBIBso2HA0U0rpIQj3	192.168.1.122	54676	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSaNUrpG67LLDJ1J2,Fl83ZQ3Z2k9TMoPhy6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1259872.050045	CmnT0x1tkcU9coiILd	192.168.1.122	54678	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXgQK61OWUK8zC0YQ3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1260035.113229	Cqqid623pwjhU1MPk4	192.168.1.122	54679	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZvYAk3XDOoGtdJLAf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1260167.447465	CzJP7TobTR7kZMB7	192.168.1.122	54680	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fbw6XOS4e0WhqgKB,F6ZvIrWmo50ozSOPa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1260802.110220	C4GPCw4J5F1jSB7Bs	192.168.1.122	54681	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZgZLZ3hBsmSMdG6V7,FHrFvV2kivrAELMOL6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1261151.567180	Ck8PSf1oXLoz9JHkjk	192.168.1.122	54683	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDFqDd5YFByCPsrc9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1261284.649169	CJexjf4mzGoo0aeG36	192.168.1.122	54684	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3dYTehBkZZsK53d8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1261413.979803	CNAqz2467RezN0BINi	192.168.1.122	54685	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRpD4tgmfg98XZNK8,Fcq039a7FxOET2Hc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1261720.140231	C0KVX9xWsiFZmXfA1	192.168.1.122	54686	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVX2Qc24ljEQ4Y3Df1,FiovET3zaKEzbPpsDf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1262071.601761	CQcg9w2ceAy7lnV8T6	192.168.1.122	54688	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fvb79wgTyZqMiSZ3	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1262230.680560	CLKo2H2puqJrwKWTna	192.168.1.122	54689	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fniqg72Z8rnM82qnN5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1262364.006073	CcVSOL13QRBiMsglk7	192.168.1.122	54690	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUZ0hm2kknXVCGWAgl,FCplK54HW3GjMHV0na	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1263019.668412	Cd816j2Pdbpco8dKei	192.168.1.122	54691	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdPeUs3VQdRfadM4E,FyQGopiov0Vos7J58	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1263276.152329	CEm9b447KCdEust8Ih	192.168.1.122	54693	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAKbFj2WnvqNCK55T1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1263398.228461	Ce0dEa1P8jwIwF1cS4	192.168.1.122	54694	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHZYRo1B1aDC9cwmNl	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1263545.554636	CROiBb37DneHHtOSXi	192.168.1.122	54695	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqWljA10DPI40Cfn91,FG5Ig32BciiGNXk5Sh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1263805.718379	CYkD3gYVyxCDjQhr9	192.168.1.122	54696	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FA4tzT3Z7cOxVqxZff,FUFPvu35aj3loRSvq4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1264114.187773	CJvro83DOk6IBCGc9b	192.168.1.122	54698	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fm1wIi1OplvbJuMT1e	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1264261.279353	CLAx8K2IwCiwQ7uhO6	192.168.1.122	54699	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FVJyBs4xEuzKu0zmk1	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1264437.617195	CubwyFe6Hh804JY31	192.168.1.122	54700	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRhOVVyM9merft8vf,FrkDzIlMUKe1POHB2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1265084.297321	CwsWfR4HWuHSqL2J3	192.168.1.122	54701	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOYQPt1BDm2cQyhpB,FAQ4Ep44IxnCnYJEB2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1265425.805860	Ce7NTT3OIWrdtqT3i3	192.168.1.122	54703	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5yfaX3ERn0efPWWHe	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1265584.912536	CBNVJuI6l7RJygj0k	192.168.1.122	54704	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fawopr3PrgToYyB4M5	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1265756.243444	CRGmYY1ONu3oz80AB	192.168.1.122	54705	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCOwlf3cAJCBabADD1,FfFJe61sZ6xssqEHt7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1266404.915730	C304dg3wZfe8uvDqJl	192.168.1.122	54706	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwBzyj4FLYm9C9EE3a,FQcznn3UjNCQ7yKL0c	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1266706.361376	CcMTUn4fps7Z6Puvuk	192.168.1.122	54708	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIeifm4iPqkEq33qo4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1266855.409032	CypG6c46BNlJXLWlL5	192.168.1.122	54709	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcLmzH1D7enEsfs4N6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1266990.738479	CXbyxVYBIUaff7OF7	192.168.1.122	54710	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIh8N03OEMqnLf74Ac,F2hfvQ1CwLrUEDoA91	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1267580.415750	CYoGO5jJi4mLn4Oie	192.168.1.122	54711	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJBq0t45Zwr7ye69zd,FAXKbF1Okv0OMuvQuf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1267884.876111	Cgy1krtZN418Q2sAk	192.168.1.122	54713	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FEkP3p1vAX0jBYds1k	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1268045.931170	CtZPod1GiyRmCYS7rl	192.168.1.122	54714	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FghJKj4s9N7PNOT5ve	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1268190.262593	CuBvBX7ZpIJ3881xi	192.168.1.122	54715	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ff5ObXzL3cFVvxuli,Fmz87JpFz02eSYkRg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1268461.432435	CVPkEc2GzA6m7ii03e	192.168.1.122	54716	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJ21Ee4pPt6USaRYm6,FTpePS2uGeGeyjXeV5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1268742.908267	CqYhLy1V7rHSSXXdlb	192.168.1.122	54718	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqZuLr4LEHbDW9kav9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1268870.976921	CTPeVM2n659nvnCAue	192.168.1.122	54719	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fs8aOU37y6PjjFpGG7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1269050.309356	CgZMGa4B26Kn3isPH1	192.168.1.122	54720	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUBznO2HtPk93SLtG9,FrsK093fVcga1jv2c3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1269635.981463	CDH3M74d5D2NXgI5Ud	192.168.1.122	54721	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fo0nrM1xIS4aFeNaff,F8nft64KTztROO6Rh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1269915.457221	CjNmNn3AoN9RypTUj8	192.168.1.122	54723	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlbIUy2KeIFqB97zi6	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1270065.544998	C3EmiB3edcFcn96jW8	192.168.1.122	54724	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fnqy691QhtDoPcMSmg	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1270213.882488	C6gf1n4N8N1YyV5JF1	192.168.1.122	54725	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMV7rU3RFrxiP1vQ4f,FFOIzZ2MhP683Lw3sk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1270829.547502	Ctyg5n4TzClbPgaM2l	192.168.1.122	54726	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fj5fGr2x0NUceBvkT1,FsE3M33aeLLb4ZmfH7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1271155.026318	Croe7j6QkcUwdDzmi	192.168.1.122	54728	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAweFf4n2rgY1bViue	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1271320.098199	CCTivt2og6957sdDBe	192.168.1.122	54729	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNUipX39BQ0SAqkPd	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1271458.441404	Ck0k0i2aTzqYwcr1y1	192.168.1.122	54730	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmgqkVHR9xm2L38wl,FLdDAj28uxjvo5R5Eb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1271805.621361	CrsRil4IzjXMemXX12	192.168.1.122	54731	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FV4jOiujc1rtFzGd2,FFVexMV78lpm3ge5k	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1272405.577434	CmGhiH2wapnNFr7ZTl	192.168.1.122	54733	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FuIYNr3aUIOZoL9n5i	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1272555.675377	CjWnKZ16b2evJz44U1	192.168.1.122	54734	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0DbFZw0UcWYgPNs6	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1272704.001412	CiduNbAZoEPUnl2Zd	192.168.1.122	54735	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJR0Fn3e0S0cldAAii,FdhO7o3xBDDDrgKHp9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1273327.679308	CoAnQZ1Crc0aMRiHC1	192.168.1.122	54736	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fp0wRB3rEbFGytQlC4,Fej0u4384XiL0FO6Pf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1273583.164167	CT5Iul3iJOxCXBvuv9	192.168.1.122	54738	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAPOzc49MCcLeotZi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1273760.256545	Cgj87V3l5xu9kQ8umi	192.168.1.122	54739	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrlYx11qPNWOUvKDq8	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1273909.585264	CEsXEr1Un4S4UqbkDe	192.168.1.122	54740	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKTKZB2rd15blYj4mj,FX3aCi4iHWTRmFnEZa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1274205.751624	C9ow4h1rKdmFN1MVCl	192.168.1.122	54741	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlC4uY350NEB1S9G9j,FDlVW63260bXTW4Sw3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1274455.226096	CM8zXb2Ao3elCREx2e	192.168.1.122	54743	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FE9zZb23h1hUNXblUi	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1274578.312719	CCkkWuBAfJEvMa4hj	192.168.1.122	54744	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fcx89i22iqEW3OSIKh	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1274720.651968	C3tc0Rkvyn71hXjQe	192.168.1.122	54745	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FE36Tq1c7mkk3R1xxe,FaYXC81mvEUC9Ybow8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1275358.318754	CgBun73tx51m8sEnjc	192.168.1.122	54746	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FctXVX1d7GpWS9JEr9,FHNUPF1X4h1SLyKIQg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1275646.807000	C6fDU8gwBlhHpAVD	192.168.1.122	54748	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdOwC01fJzx1VYPCKh	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1275788.893578	CldUPH1lffgN9IWW09	192.168.1.122	54749	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Frl5ES2HkLeG2CF35j	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1275944.220895	CSHEMe4VCPmIf0BVdb	192.168.1.122	54750	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOJ3hl19SlS8Fix7U1,FdIOzP3P5TYsANUOw2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1276570.896708	CM5KEn1eskb602FHzh	192.168.1.122	54751	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F49PtE1bnvCYStoUJ4,FSJWea47DS8GfjNE8l	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1276879.360119	CW2tve30MVqtX26ma9	192.168.1.122	54753	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fq2GEd3tsKxOAmxxIb	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1277011.466983	CISBlJ1SEOsEsjxCo8	192.168.1.122	54754	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUL75H1HUteSR46o56	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1277139.800087	CtVGs11JHD7GWyYP99	192.168.1.122	54755	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZkh5f39RF6fQz3Gdj,FiRCXJ3Uln5Hpovch2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1277710.490679	CeIpJqoVGMPQGO1Zc	192.168.1.122	54756	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLqEPu4EZ10Q3Ei0hf,FWkD2Z13iDyzAAeypd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1277987.961410	CJdTa14QXvZDjYcuCf	192.168.1.122	54758	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwmPYD25Pv5NnZ5bg4	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1278110.070508	C8IPoQ2CvyYnigAAP7	192.168.1.122	54759	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRph363r9pW4aOtmlf	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1278256.414606	C5If063QZ1hEO4zJGe	192.168.1.122	54760	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyjnT8HnXgstz4wj,FgrUdr1ArDPWEoOPt3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1278891.078028	CxZmarbggSRyQvQg6	192.168.1.122	54761	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeXpop4Fy8ezUSVuOi,FQ8Mog3KxeYNfaiqZg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1279185.536569	Cnga9dAShmZD2B5O1	192.168.1.122	54763	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwWyZpGcUuqdHuQq9	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1279311.618621	CeRO6P3IG8spxjkhNe	192.168.1.122	54764	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FAUUxD3NzrcXc4HGlj	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1279473.956321	Ck7LDj4wxWfzQkmg5e	192.168.1.122	54765	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeYSpn4bxAizEhl397,F2jT6J1o6nQEJVXwe5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1280051.627153	CKYg0oQSaLuDLrIX3	192.168.1.122	54766	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FV3xyFHE4UCtw58q,FRpCXT19pbBGTFGMF1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1280358.092065	C0bOD21ScFcZUQ02k7	192.168.1.122	54768	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVs0Ml1qIoYC7sIF8f	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1280494.168750	CIT33Z3StdZiZvlV7	192.168.1.122	54769	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FTefHeJP6qbHKdFkb	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1280616.508268	ClvVpy4IvH3utLYy28	192.168.1.122	54770	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAD0iO2vhfLawZ89Ja,FR4dx43AWUkW6AlMM3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1281232.183993	COTJ0E49mIWT4c23M3	192.168.1.122	54771	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbRjFS2snKUovErxJ,F9Ywig4ZJmhuTd91f6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1281556.649686	CQzlVA4bZKMnSsgk0b	192.168.1.122	54773	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlSEnHyC0rzgZ8Yn1	(empty)	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	CN=swevix7therisu.bnpparibas,O=Obrie Mpponpoto sf.,L=London,C=UK	-	-	self signed certificate	Malicious	CC
1281696.707590	CMlCHO1DVnK8xTRPg2	192.168.1.122	54774	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FjQMzB4usdF7Gr02i7	(empty)	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	CN=Athas9anteri.dhaly4ofthe.audi,OU=Fenty-hilll and lovediatea and 4Trk,O=Angandt SAS,L=Kuala Lumpur,ST=Ermeris Lypln,C=MY	-	-	self signed certificate	Malicious	CC
1281859.044973	CUv9HE3R0dtJ2WGDm7	192.168.1.122	54775	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FR5pzA2qADch4VDca,FNl8tO1VYPFE96fISg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1282512.735303	C2jLK94xAxFishG1B4	192.168.1.122	54776	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDukHa2oCWLJGaJ4hk,F3SNSGeg4lCGyg6Gk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1282782.223589	CF5tEiy0IKKmcs8i	192.168.1.122	54778	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FizcE94Jf3b6hb5Zi3	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1282954.346012	CmMRuv4oCqpyqIMIM	192.168.1.122	54779	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrA1tpqA4FERmJDya	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1283095.693443	CIcEXM1VDaQUp7dkh5	192.168.1.122	54780	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6vCxl3rH0ezEuzL2i,F201CN1VF24XkGCme3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1283729.364594	Csyark1hdvg7o61nI8	192.168.1.122	54781	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fl4Ucd3NbSzOlNierj,FvBuST3NKltoWIKJb4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1284066.119934	CnMN011f5792rrgVci	192.168.1.122	54783	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhuRM72Uq330sFdAg5	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1284190.162724	C7RO722WLjrEA0myad	192.168.1.122	54784	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fhda5i4HAu8eGStd21	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1284364.487900	CiIrDJ3S2HeBNFkVf	192.168.1.122	54785	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSo6aaG9OfJCzeYPe,FHBA611Lw6WHxaMtSk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1284941.156569	CJAEt139DxhJsV5EMj	192.168.1.122	54786	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZHrya3UmDmGrvRCIe,Fzh47A4QHOWdTnPJ62	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1285226.617672	CuELlr19sB4JcJnbZ8	192.168.1.122	54788	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzcrBd19R6oyX2Ouki	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1285357.691349	CwvGB61EYeXNlGYVZj	192.168.1.122	54789	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPcqVTi6YK3cTlP44	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1285530.033240	CWwjEwIkgrBjGL7hd	192.168.1.122	54790	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fdkda9AxqhojqI58c,FGTcNb4ylLUcwAIA1d	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1286188.700596	CAe5h93oN5yTJUKEj9	192.168.1.122	54791	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FABo3CSYdbCzfPIw8,FEekij2nVsBY28F0qa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1286511.492507	CILDRB3TOgzC7irOI1	192.168.1.122	54793	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F03KjO26Rf7ldBTZHd	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1286641.577179	C1aJblWpEyYGqhHF9	192.168.1.122	54794	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGdWGG3yVUcQBu2S0i	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1286766.911633	CEpK973Ba3fZgxruhj	192.168.1.122	54795	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHTn5PYwCyInjEiP3,FgJvFa11HOzt16A3gf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1287055.076011	CWgbvr3DmwdQMPRxOg	192.168.1.122	54796	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoK4P4Rd1UHLdq6S7,F2Cipm1MdHVCcvoucc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1287344.840144	Custzs4EQWsg9UbiP	192.168.1.122	54798	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FSc8Tf3ndCUC3vT2W2	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1287500.922788	CYORjv22NuIpfUHLfi	192.168.1.122	54799	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdA4DL1eVYAjc0TXa3	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1287649.250035	CsTROCXkp2oGGRYbk	192.168.1.122	54800	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3uGOZ2etSyClQUmok,FmHz0Y32zM36eFaAK7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1288302.930273	CCIOaC26yLhEsVsCMe	192.168.1.122	54801	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqMFn842UG4Wd1G6g4,FSrDyc1lxiVaIEHnS6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1288594.721655	CejAEecLyp1QcWBQ4	192.168.1.122	54803	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FexJuf25J8W5txEMT8	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1288754.805609	C0y2Va4TIeAuozIWn7	192.168.1.122	54804	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdlMUiELYT4Cs2yL	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1288902.131571	C960Bg4QkZmASaz173	192.168.1.122	54805	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhaTvZ3rUzkPOlwW31,FsnJ5R1dpkgfo0Jo81	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1289515.794008	CHSpVi1LGjMFj2QKXj	192.168.1.122	54806	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVEBEq1IBEnru6wNwe,F5UIGNXKI8hjhxFze	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1289819.573949	CH1otP1FNDjrZ3KXw7	192.168.1.122	54808	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4qa4r4DwVwRfI7Nkl	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1289987.627818	C2QpWK2t19lwBtoaHg	192.168.1.122	54809	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FepW0836ZwSMZMezoa	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1290124.959630	CNo5K21EekBymNuCje	192.168.1.122	54810	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYmcxBTFkbUcCHWkc,FWXZQ11ePyB1wQGQxb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1290732.632729	CaQu5c4aPaZ2fskyge	192.168.1.122	54811	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F328rc2rEM8OcvJztk,FwUIq2p1evwCYp84g	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1291045.398096	CV634o4fdVhDHy7Exj	192.168.1.122	54813	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F9fhxA1ZuNDK2xw5Jg	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1291222.473472	CbVor03r1zqLbfUFld	192.168.1.122	54814	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJ3MKk1OLuMwMc1CV7	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1291372.803923	CVcsRS1v3bcc8c1GD	192.168.1.122	54815	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoDKf02JAitr67xvkc,FU6rzptSlLpSJBrc2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1292022.468242	CvLMImuh0NqVlIUUd	192.168.1.122	54816	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FC8y3y4Cz3QP0ZRBce,Fx5Ry91cO9CqJBEJqg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1292371.941914	C6kuFg4IYjJTPbvXWc	192.168.1.122	54818	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRWCFk3thSlrO9jM4h	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1292544.033271	C6zJ191kQPImtgyt74	192.168.1.122	54819	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlXDvV28UMSy6BzIP3	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1292688.375400	CIMJ5z3xFm8cEIJjsj	192.168.1.122	54820	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJuZRQ1jZzJwLzQEga,F3SOY41PUjXQ9iOOob	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1293236.053329	CRTZ1H2qSrBgoPbPtc	192.168.1.122	54821	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7J0cs42IfAlCmtKVe,FijlvV1ypf9WeGtdLl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1293513.827390	CMc7Io2raJrzfOmuJ8	192.168.1.122	54823	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fsc1ue2FN6tUyGYmH6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1293689.901321	CnSBGb2h3wobPcOLsh	192.168.1.122	54824	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXG0X413DutDpfcnNk	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1293843.226084	CgSqSw4XMz66SG7Yu6	192.168.1.122	54825	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3j2a74o7oor9a6ux7,FLsULz2I0FudQNfTga	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1294093.405534	CGwe9f4Tqbt9ujhUNc	192.168.1.122	54826	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FntnUK2AVhN3Sq6ina,FdE3x615krKrhcKXK8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1294429.179786	CVoNGx1ygdJtaNiqlj	192.168.1.122	54828	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FL6lAlQqoJ930PIw7	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1294559.261272	CZT8S44tIGGQlu1j12	192.168.1.122	54829	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FyOJv9DBxrHQmaW84	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1294720.587442	CnP96E3Yi2xe5UV2ra	192.168.1.122	54830	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjiQ5r3o4PGuLloQS2,FaAQYd1FKnDENPfYE3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1295317.265258	CG2JeiamfvrU5MMX9	192.168.1.122	54831	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmDCARlXhmJgQnZ07,FnCUK11qB0xE6OCvDj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1295624.037884	CAsWC048lfuswqSzi9	192.168.1.122	54833	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fb1Ffo26xjLzQCJts6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1295773.096147	CoT9F11NwCcyYjcG7b	192.168.1.122	54834	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3dEdZ1LNbVdHDJmIe	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1295910.428532	CploAl3xWQ5jdMOWW7	192.168.1.122	54835	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXZUT12dHJclyiJzxd,FlimBU29C4xzirTt7h	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1296473.097083	CyBg3x3LpYWlw0yq9	192.168.1.122	54836	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHl1HIFi3akFIagf3,FItlxM2rWUv7SdSCrg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1296813.870599	CKLyHL2XiLeAVmmbbl	192.168.1.122	54838	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmLI5S2Fr1YtOq6xY9	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1296976.937034	Cag6iS10EvqLltnQae	192.168.1.122	54839	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRXaPy1N83zKvuKW41	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1297104.254573	CQ4QPs10IYLxEqGohd	192.168.1.122	54840	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwlpJEkU0riojVO7g,FhlU4K3O1pVjrNC0Zk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1297678.930892	CWj6P01yLRcz8hIBB7	192.168.1.122	54841	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6ih4e1UPU4tZZN2Hl,FSUxbMrvqWrardOo1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1297965.703863	CvxWJN2D848xWBEVAe	192.168.1.122	54843	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPdMZman0DZcyIl72	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1298142.753323	Ck35yy4ZbshCXgHdfd	192.168.1.122	54844	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fs88MM2ILhk6pcJCpe	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1298267.086694	CnjxJfIaQtZOoUVZb	192.168.1.122	54845	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSL3h72iefwdA9mEqe,FDWv1C1Zo2ry74nMMl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1298907.757842	C8OD2s4fTXX6ncTNp9	192.168.1.122	54846	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFvMjJ2veQIs6OYGXf,F8y9lv1xZaQqr3PXDl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1299198.529161	CMVoql4MZ2Ka8maUn4	192.168.1.122	54848	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fg4QMbLOf5UiPoB4f	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1299322.609553	CtJqwJVHXFs354eSg	192.168.1.122	54849	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FT2qON32OmBm4yPnQ1	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1299479.940200	CXRXsL36wc7O4qEPFl	192.168.1.122	54850	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFvieP35JeQAmLkgB8,F7dwNE48Y9pp6XgEAk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1300083.608658	C2XBDK3dMp2XjS2pKe	192.168.1.122	54851	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpWKpEbZK3gJtuBJ5,Fcbl2lf5sqx86VAk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1300404.396753	CL31CR1SriRwvjQxOi	192.168.1.122	54853	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcwyTc2oBZrY4OQoL	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1300578.485925	CCfRCHtjZaDj05RL8	192.168.1.122	54854	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKwFHl3TnKHYAhqZxd	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1300716.808774	CYmc1f1NBE3a7UQIBi	192.168.1.122	54855	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUV8aX1QuPBsQsHy02,FjpweE2WaekSBbpQ26	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1301372.470896	Co6o27oFmvVSBrSn4	192.168.1.122	54856	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxR8v61kDFia20Xjf7,FBCsOZ2OkdNekw04ll	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1301645.228360	C9Djlx3LxwlUPR5TDl	192.168.1.122	54858	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FV3z9DZGvp8BhGuyh	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1301785.270646	CuY72f1rdPE9INkilf	192.168.1.122	54859	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHM1KJ2Gy2KjDPeFd2	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1301946.597437	CZTp4v3CFSEduGBO2b	192.168.1.122	54860	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLu4Fa4M2szMeGVJr3,FMBTb64kMGtgmajS88	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1302527.271749	Cs1DarlCk43wiRsbl	192.168.1.122	54861	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsHqC61cGAjo8fFVgg,FQpW4g1ezq41c6xd1a	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1302829.096290	C4x2QP2PlRzOOYvA16	192.168.1.122	54863	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPuvrb35FwbXnqwBfc	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1302952.238058	C2fIHCgGZQBX3Kgue	192.168.1.122	54864	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FV9VkOfNe3AYslbJ	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1303094.557074	Cy1Krb12rrVErIpMlb	192.168.1.122	54865	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfHGbG4muuenlpkkze,FfrL291Ye53yfaMfhk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1303342.734229	C8In1S1OfkP16Qhb17	192.168.1.122	54866	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ftrar4RYMhiJjEuN5,FaAek02n6mJkegdkX8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1303643.517863	C445u038tKeVndbVD8	192.168.1.122	54868	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHVCTy3K7VCCwz9Hqi	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1303814.567939	CW1KHBTGKncdy57Pk	192.168.1.122	54869	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhImN8j5P0QteLOc5	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1303992.899211	C7rUzF1BRDB0h2ZuKa	192.168.1.122	54870	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbG0nE2mW7VwZa0CW8,FTvlNVTHVjX2o5945	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1304561.567119	CmS7Z63JVNXNXJevL8	192.168.1.122	54871	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FULqGs1Mu2lxDqEpFi,FXkXkv4jXNmR5WP8D5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1304901.352315	CXQbb3edGXfGa5LM3	192.168.1.122	54873	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FfaUFi1amaR9YALw86	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1305031.427541	Cm2EuT2ytUbPJ20z4a	192.168.1.122	54874	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRUgCT5mQQkhloV1j	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1305190.751413	CPGUhbhVTikL3kz3g	192.168.1.122	54875	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnS2iA2PYP5iR3iAz4,FWIzw830xRbn6LJoW4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1305778.426320	CzGwn64VhKjPciXrZ7	192.168.1.122	54876	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoU4fZ38myT4MftCSl,Ffoe8A3KV2MDrLU9Y2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1306041.195358	CmS2KA1VGaKrO0KXjb	192.168.1.122	54878	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2rBEl4Nt57TfKiEfi	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1306195.270886	C36xnOnvnbr1SBTEb	192.168.1.122	54879	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdO4UG1byWrq8ektU4	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1306372.590347	CAuQrC14XTSh89P7Bl	192.168.1.122	54880	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkkTAf2izOwOLjclt7,Fur8B04AX8k5WDHCOi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1306938.253779	C7nRmdIg0ixqk7ug4	192.168.1.122	54881	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrtXGGgix4lIYkL7a,F3eqq33y8dufXMcUtl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1307263.042817	CdWGXc3bK4fOxGONd2	192.168.1.122	54883	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpUvNe3RpPSJrilCji	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1307416.126791	CLOpl54pGQGJ7Soh44	192.168.1.122	54884	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIrW314Pfm7G6VaXOl	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1307561.459844	CPPMZv4KIwNEpozu86	192.168.1.122	54885	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLFOZC2y5TEQnXzwUc,Fy73au4synv6ghG1Bh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1307877.634575	CXJ0rf3mMH4oDUUvy	192.168.1.122	54886	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FikjlZ1H0T0LVsjVAi,FWyUxC4Xueyi8Z2X2g	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1308159.433270	C4b85s40R8mxos9dm5	192.168.1.122	54888	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmuA5l3SDs7Q1zzqSb	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1308330.540831	CpS4tp1roZCowX6Jo4	192.168.1.122	54889	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgZIKf4JXojRjmllYc	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1308484.867543	Ca6ekr2XVbt5CeEAh5	192.168.1.122	54890	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fr6lbq1Cwa8cIEAVA6,Fn3V8c96tlGefWq5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1309098.539611	C3R55hqOoe8yFsBnj	192.168.1.122	54891	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fyh06228XkMrop8H2c,FnZAYuBWx01Wuqet2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1309406.365155	CO8nfTQYISuuXbEB5	192.168.1.122	54893	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJ1YlN21M8GcuE1Dlc	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1309529.494960	C8AhtA30F2UF2uYGLh	192.168.1.122	54894	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDAsJTRiESKPuDmpd	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1309683.821059	Ce63Uw4YEurf3V3rLd	192.168.1.122	54895	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmaMsP14UrRxxFRFQa,FL71lm4tH3ps5UA273	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1310273.499104	Cp7lEN1CeM5IrCu72f	192.168.1.122	54896	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbELNR1kcSJpm4dO9k,FhsHux4qn3GBeMF7Wh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1310576.280188	CTYYYz1M3VGyMUJTj6	192.168.1.122	54898	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FEopaWNBoCOpNlrN5	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1310730.351328	C11USp2uXMObQ705Df	192.168.1.122	54899	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FFtciH2aCSMLUR1Njf	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1310862.675884	CwnTNyGFpT3PHAXfh	192.168.1.122	54900	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6TfzX2RGolFVFc91f,F9sGk22Tz0A4sd6TYd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1311481.345480	CtJXMY1f86Hpjy49Td	192.168.1.122	54901	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYB82b3YIp80EKEfj,F2aChi3VwU0fpKblD6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1311779.106633	COeynarW8DtkZb0g7	192.168.1.122	54903	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fxe1194pXkuXaPJdLj	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1311951.156711	CSNGqy3EYzf24mMuHh	192.168.1.122	54904	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtgYR7fDlt2ERXvqa	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1312075.490395	C8hdFv3esGO5oESYCc	192.168.1.122	54905	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuOJuf19BkLjPalfx,FGVwPO21NpHhEDE8sh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1312624.169098	CUFJiA3MWm6Zbed1ee	192.168.1.122	54906	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fb7Ex22bvCOA2tFVll,Flwlio1wv9r1RgNZv1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1312891.952257	CjbENk1zQ1qwVvD7Mi	192.168.1.122	54908	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FkeEuD4H5tajcuSX81	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1313017.019240	Clr1Yc1iNbCN2ynFq4	192.168.1.122	54909	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtNk9a5fCr1T65I57	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1313153.339473	CdDaxI3VlajeV3vxwd	192.168.1.122	54910	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8qUEm1SHghggAjPpb,FIctQ21Xz4TPWTcRuk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1313404.791182	C2ddBP3U3p02BKGWy9	192.168.1.122	54911	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3s9944IBWdpq1lx2b,FvZ4mT25A1PXqfewma	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1313704.558060	C0RGm04gm4owOWpxGf	192.168.1.122	54913	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCusDN31Y9mKTpEbvd	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1313846.622128	CEvcdL1tBUMrYWrEni	192.168.1.122	54914	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FD7EKq6QFbo3ZGgP8	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1313973.949508	CHsn9R2LFnKl606MIi	192.168.1.122	54915	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSR5ILECTX84ZhW0i,FOhw841AH27CzSTsD	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1314591.629592	CSMLTF3tx08Xyi8OT4	192.168.1.122	54916	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWSIHC3tQPDhMSx2Xe,FOXSxfYDrHsyXes35	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1314909.406163	CLhk8xr0fm4zIY4sd	192.168.1.122	54918	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPYkBL3rgiioNl8n81	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1315053.477339	CDGYZl2687bbsNEn37	192.168.1.122	54919	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtiMmy45Vx9Wk4ivih	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1315194.804616	CW3dzJ3HUrsicW4cR1	192.168.1.122	54920	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrpXPJ3i2MxwZqQfp3,FbeTdW1eYwVXjJEvA	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1315782.489859	Cylm6p2un7nV2YBZDi	192.168.1.122	54921	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0JKvrBMeJdYYB5f6,FgumxXjqgu75qzRul	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1316085.270137	CTLkpH3S6h4Bg0CON5	192.168.1.122	54923	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRwMee0RmFfHR7964	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1316209.359171	CPgbHZ1QPtRcj1CLZd	192.168.1.122	54924	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FsrOAE2wn4HnBze6K2	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1316329.676662	CPuaAR2fDiHBAkxUSi	192.168.1.122	54925	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIrZ0v4Vs41Z0Y7wzk,FqBvDK2Ui5yH9I97Fe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1316982.344729	Cjwza12S41XnTz2Ce5	192.168.1.122	54926	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FazNSJ2X8GBF5NMGG,FD9QGD4w1KStv4Rakg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1317271.116421	CMZmBm1XO194OMmFrb	192.168.1.122	54928	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBDYJ84ogLy8ufqLhg	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1317442.201488	C27uHb4a2blCpCIXWj	192.168.1.122	54929	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fo1itJKC0tQfOZXl1	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1317598.521010	C14wL34WrNN2FdrVe4	192.168.1.122	54930	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0MnwM2WooszWJCvfk,FkaAwq11eVgcAr7Jfa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1318191.193430	CVTZ2c34C6diKrrKGk	192.168.1.122	54931	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fdy2xzYYW8q3OoE2a,FH4L8p2q92CRDV6AJk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1318492.958532	CEOpx13xI2eGcWNZRj	192.168.1.122	54933	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FOiVnf3CvF9HV98WI4	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1318664.999474	Ceeb8i31wIUqomVz7g	192.168.1.122	54934	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5Z2mP1zCneHTaJzf	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1318840.326271	CPWoPB2qQwFNK35qR3	192.168.1.122	54935	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvMuip1Xmy1pMGM8X4,F3T7nT1yj2X4QgCxJ7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1319456.012289	CzFVFg3WY9LsN1iuP	192.168.1.122	54936	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSChYi1Rg95XlOR4Yc,F5gBdn463pAIlgQBog	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1319774.786260	CaMj4Uf2CbUKfckk5	192.168.1.122	54938	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FD8Kun1V9mJhV3nyg9	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1319911.862237	CXgOIl4tgAUFwCrmEk	192.168.1.122	54939	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Flr3ZADaorvfNmtEd	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1320088.180603	CAxokmxEtylzWrhZ3	192.168.1.122	54940	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfaIqx2mgUST2OhU2g,Fs0nrm1FF0jC0IGjX2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1320718.846973	CaN3ct2ad4GHnZKwv8	192.168.1.122	54941	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F10VT32Up7pHh1CEd,FpVQ0m2aefHPbP8ide	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1321014.616168	CSWqh71HI4sLLlYeF6	192.168.1.122	54943	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLhhsF1oXeu2Dcsz07	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1321189.680013	CbTXol8C4eqFZdjY1	192.168.1.122	54944	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fp2dOc1YuLlThxbERe	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1321362.011769	C4a8fw37uTPM4czsu5	192.168.1.122	54945	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8rIv34sRRFWaKJmfb,Fcxzluu4E9J2vrrti	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1321937.680058	CgsaUC3nJW1vVIL0r1	192.168.1.122	54946	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjEF8UrcGGrqIZVth,Fmpf633R2LDDIkoG6k	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1322251.161898	C2bFSA1bvG0Bra2bEg	192.168.1.122	54948	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzXwfMMH5lI1la483	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1322400.229945	Cdtan01xQtX4guw7sj	192.168.1.122	54949	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FC3Tr638Xnn1hprzR8	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1322577.559311	CLFAP5p13wiTCeKi	192.168.1.122	54950	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUQdAt3TCrQ9cymQLd,FIJX64m3MDPudDkfj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1323190.240829	CP2vDR3kSrQkbBTmZh	192.168.1.122	54951	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZBQWb3iXhFhuwRCc,FrbHTf3P9WJx0KCKL1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1323483.042260	CEg4gp2CNaZIplI0Mg	192.168.1.122	54953	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FyghTL1kULqGtRHFFj	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1323640.133218	CdoBJD1njXK6Ax1ow4	192.168.1.122	54954	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDiQ5P3pDzXfH4vCA9	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1323778.456061	CENd181oAPg9uMrLIb	192.168.1.122	54955	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNpzjPPokWuLxFQZ6,F0RHxq3KkBxMC1Oagk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1324419.137694	C6ZqAN2Ll4Em6KpKOi	192.168.1.122	54956	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIBufG2iN0DIKMTJsi,FOMP3j2g3tJ8xCO6df	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1324696.917949	CdvueY2Dd6Eltp8F7b	192.168.1.122	54958	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVPH401kDH3ZjZWAJf	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1324826.008023	CHCq6EPMVBHgFJOZ1	192.168.1.122	54959	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F590Tp1B1M469N14D8	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1324984.329510	Co8LkkwJmIW6J37sa	192.168.1.122	54960	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUQpPv2b3rEeHBpmaf,Fs0DrN1iwgAfl3Bhv	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1325538.997500	CAoOT93avoPYcntCNh	192.168.1.122	54961	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZMDbA4TdWbiIpOPtf,FMaJfT24994IWsK4R4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1325830.776296	CvDfCh27xNKdP1T4O7	192.168.1.122	54963	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHYpMu23swcPeUoNEl	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1325996.841117	CZOWuj06JIvWp9yYb	192.168.1.122	54964	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fid5G21C5ekCBcdvh7	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1326169.163790	C5Ik9q3jhlcvHiCu25	192.168.1.122	54965	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbQyTI11BPsuQTsNTg,F4WAvS1SjyQ02S3OP6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1326778.830041	C5INdf4TqjAFbuSgWk	192.168.1.122	54966	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmQzWvkxAWcLb8eVd,FEKy36QwldkEZyD1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1327066.610557	CFE9QO3ousoTJFmxr2	192.168.1.122	54968	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqYY393a9qUgqdh4Pg	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1327196.676999	CP3yEF4TrQCi7pdGJ4	192.168.1.122	54969	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FG6DvvKgDhMG3esZ2	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1327343.013116	CuIX5u4GP6w0f05pS4	192.168.1.122	54970	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0T9mi4MErfUubbUji,F3ogX846svT6Ge8t5a	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1327933.690666	CeGEtD2LujCRSkGUAj	192.168.1.122	54971	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F95X3I6Zn6UICecK9,Fap5Fr3oqO0GjCQcr7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1328261.461334	CoeUqt2HnNnC5v3SAi	192.168.1.122	54973	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCM74v2d3SNC4ZTwJe	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1328440.534628	C3Uiar6W6OEvMIPs4	192.168.1.122	54974	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcyACW1Fh5OO7Ok993	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1328565.869779	CzllBB2u4NkVptsPuj	192.168.1.122	54975	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHHzAn4QYgWmNLmg71,F0ByKh4jhNkySYPOxg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1329129.540247	Cuvrg4enlXoutGBXh	192.168.1.122	54976	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXqW8x2E9P25F5PQG7,FBiQd33xLchms0hf0j	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1329465.300350	CBgjxt45lHMet28aXh	192.168.1.122	54978	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFJiTI1Ba8IkJAuuC6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1329608.363556	CYBGFU3QrbnbFaAoJ8	192.168.1.122	54979	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRceF54QJaKsJdiMZ8	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1329756.691689	CfhMX5DGS2FC7DKp1	192.168.1.122	54980	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FutU8qvJf1TLFxL05,FckFlb3bRflbFoHlw3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1330386.367044	Cxo3Hh12bQwiAo9Ndf	192.168.1.122	54981	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDstOd131uaXOxsd2b,Fb5Lhc4midjKzYzQUa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1330665.162247	CjIa5tyxR9JaKDKUa	192.168.1.122	54983	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6oKrA1t8E5hewo2P2	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1330786.257733	C8vHE2ccvDkNBzP22	192.168.1.122	54984	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FpBMuUysDrjoJScGg	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1330965.599479	CqQJH33pj6kBJ0Yetl	192.168.1.122	54985	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fwz6XC30equco1GTgl,FM6hIr1IZhmBFdaf34	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1331525.264685	C3f8Ts1JhG2vWh1DRk	192.168.1.122	54986	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8ke7u2dd5MgDFSNFe,FQlkOy3l5lPYHkuKRh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1331806.057991	C2poC6VotF4ATqgd3	192.168.1.122	54988	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDcfRl4wRjRgJjg2H6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1331973.173847	CZ3O0E3ZHIwiQPvg68	192.168.1.122	54989	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8SW5226mcYxlxTopl	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1332136.503512	CNOYuj1cncqho94yP7	192.168.1.122	54990	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqbkSb461q5tPg2j53,Fs63CoQa93nDBr35g	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1332748.183100	CTdWf327AvPIboRpXk	192.168.1.122	54991	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ff8PLC4le35gBi6OR3,F3jhCl4SeUQ8ipmzx	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1333068.942348	CPCNZb4bLc32CLVfHd	192.168.1.122	54993	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fpg2G04eDHvx7A8Hr8	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1333208.014612	CLyZXL1uhVtbfl9Yg3	192.168.1.122	54994	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3oL1u2GNpDoTMsGH	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1333386.339911	CAIMhq702p3Jo8Vvl	192.168.1.122	54995	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtbgMU3ykMz04yjuVg,FcGO8XUez5jxM1Rz7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1333710.506527	CViIv54PTSrvPH23Te	192.168.1.122	54996	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIQkiU3DGmFLR8x8Ob,FNg0KuSSjZmyRvvm7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1333993.301416	Cb4C0F2YcZa1Xu5mwe	192.168.1.122	54998	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZEADj3sgPtLPEEFXj	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1334115.384004	CAdOXW3kF9g0lWWn2l	192.168.1.122	54999	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9yU5811KMFbg7RE63	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1334287.717540	CTkuzX1fkucudVeYF5	192.168.1.122	55000	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FP027M19Ah0NEiOj7l,FbHYDfImEiE4GgMbe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1334835.393680	ClcYjC1ElPBwdi7YH1	192.168.1.122	55001	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FD6kFs1s5qxSXPPonj,FJcSUa3e5ZzADVpqd2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1335133.154337	C3SnZTkuhLY3HBQ86	192.168.1.122	55003	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6fQUZ244WK6uL6pgk	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1335299.205721	CXSRny2vuJOxe2aLm9	192.168.1.122	55004	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FH5D3a4WbKrpIiTf26	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1335454.533799	CwNofN2ec4cC08dM7a	192.168.1.122	55005	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhMUP03djXgy71wS5h,FHtB894t4P4toBRju4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1336113.210666	CjOvUs2012dZjWGLNf	192.168.1.122	55006	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1k4vS3ZOuVPZrJP0b,F15t5i3wBgeZgsEizb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1336361.681135	CimNgq3o98qfkWdryg	192.168.1.122	55008	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQx2iwJjYuW1tixO2	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1336512.741410	Cu7i464qZYQVrWKdzi	192.168.1.122	55009	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FvfPej4C3plA3GEX86	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1336665.064460	C2udkulhe3iPceYug	192.168.1.122	55010	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fs9ECr3d5jYNV6lrJh,FE0g0Z1x1OJ6UkDkQj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1337233.741793	CXtG1JJngfO2dvDgg	192.168.1.122	55011	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOd9WlMJUspnK4iIc,F8UeA83lCI5rrRVeNj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1337526.523545	C0TXE8lKtXp92uQ2l	192.168.1.122	55013	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVQv2r30DCxew0qdA	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1337649.616712	CSdja24YvJ9MmujvUa	192.168.1.122	55014	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4TIHZe2rxrjAgZL	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1337772.937115	CzDS2GOkmoJClfQ82	192.168.1.122	55015	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkPw5e40SmYH68aZZ5,FMmW7p30WzWCVgGm63	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1338339.622564	CueKGA1BMGuRTG21ye	192.168.1.122	55016	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFXtc619Ci1087ulD3,FWuwaX1NViye2c5582	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1338698.372245	C42k084g1a1YsKm9b	192.168.1.122	55018	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPOTWq2sQjKqGwWzCg	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1338851.413409	CCnekn1B7ie5WhOjS5	192.168.1.122	55019	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLNV163VDUS3ywD3kj	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1338987.733891	CGudxYW86xcKXADAl	192.168.1.122	55020	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxaC3J6mxX929crM5,F9IXBw3qeLooS9pH68	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1339594.406727	C0gpEz40eGXU5r9oX6	192.168.1.122	55021	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fe29zW2wuDi4IcWD3i,Fdtvzg4T3EB8gMIIol	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1339908.148926	CHitcs3xLBoNIFH1ma	192.168.1.122	55023	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FG3aMp4hPIL4Ood5ij	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1340046.201198	CY3yjm42yFDyywAq8	192.168.1.122	55024	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhXiYn2hKsZy9mEujc	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1340171.525785	CmxqPk1uPpjMPGEsj	192.168.1.122	55025	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F91knKdOkEGCRVBb1,F6ZYoS293ctEgOFep4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1340750.207774	CfwK3y1px9w5vKA14f	192.168.1.122	55026	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMqmzscJWNHzwD3ab,FHRwFT23If1kctIcHi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1341081.981124	CDeZY11or68rcZltQ7	192.168.1.122	55028	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwAGec2YS3l7kSLTX	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1341250.041968	CycFRj48TjPqGf5Nn6	192.168.1.122	55029	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOwQjr2nDs6zz7zlJ9	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1341408.363857	CXg1C54jNYllOCKhz	192.168.1.122	55030	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiGgp72OGs9OwUk1v3,FnLbSY3ru6tL1sohqd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1341986.034540	Cz4iMSPGMJLl2RITk	192.168.1.122	55031	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fd4SKC3jeHQGbRxGb8,FazOxlBOiEPCcAlNf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1342259.834471	CMJzua2WxO6AnEwHN2	192.168.1.122	55033	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fdzjcw4WPYXskgXNQc	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1342435.916402	CVbiZgZ86juxOtx7	192.168.1.122	55034	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9Ivwa4KD8Oq5CsWAa	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1342576.233024	CjF4334PKCj8xniAxd	192.168.1.122	55035	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjsigM1oJOeUIzBKCk,FSNKEv2z87GFRmiTh9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1343137.900680	CAlANe2N4Mt4loJF7b	192.168.1.122	55036	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoxWAD20lBbs6jbDL3,FJwfgA3l5vZT55IQvf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1343480.667751	COq0Zbjk6fJkRJu4c	192.168.1.122	55038	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTrtaV1s29fIzkWFSi	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1343650.723701	CXL4uI2wWp7alrRW5d	192.168.1.122	55039	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwJL8F1QA2ttQw3CJb	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1343777.049658	ChhtqL3Blnocc1uuh8	192.168.1.122	55040	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9bmOz4csZMORn8F4d,FtONYH38u9oVeFxbNi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1344374.728977	CHODiN1NpgdmD9KNnb	192.168.1.122	55041	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHujxl1XbjpUygGO33,FcwH9H39i0pbmaY2Qa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1344687.500049	CuUJH64QODEfd36i3e	192.168.1.122	55043	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYO1Yw4CuJ3AgMU4ec	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1344813.586289	CzzRvKf70hYO7gsI8	192.168.1.122	55044	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FT0jKa3PX1iv96pnd	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1344958.919325	CieD2h47IHLWXGzUJk	192.168.1.122	55045	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCMJ6s48tAdklHD4H3,FZhOHq25mKKQaCg9X1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1345541.586703	C2NM4B1juVkZxCnmEe	192.168.1.122	55046	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsbX7TiIBW8ypszy5,FVjp9m2mFx0a0VIMj6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1345821.369667	CEOgbf1flzpRf4uA3a	192.168.1.122	55048	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fu2KtEhrVT5dzeQol	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1346001.455003	CHfZKvQqrKyWl9291	192.168.1.122	55049	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfBKTN3OBm2187yvE5	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1346165.782993	CphFHn2H7ni1Tt1aFg	192.168.1.122	55050	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGkfz24aVaMq3WWSAj,FUI5iepzf6vMJDQAi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1346772.446340	C3skcb4Q93pQjiUTXj	192.168.1.122	55051	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FC5iqd2paujB2eEkt8,F1SU4HFbikrnhpZS	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1347112.204424	CizfoQwTIMvb4Xtzb	192.168.1.122	55053	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4VgnL3u9Kd1xt1rNk	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1347256.267442	CaWH5c1T3Ju81IUjth	192.168.1.122	55054	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FeiEic2DHSXRpmVxJa	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1347427.598223	C3dOCq2pYrR3LKsiK	192.168.1.122	55055	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBX23V1Dt4aHBSDnq5,FbRgUf3FCWfaoZtg23	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1348076.270884	CS3y2P3K6YcNh68UH7	192.168.1.122	55056	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzKj4D3hO3G0v84BUg,Fyctr41QmG3BgsYpzf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1348429.052902	C5nmNtBAEqBp2HI0b	192.168.1.122	55058	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJwz5J17k6YukSnm47	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1348606.128889	CbtcZV2E0qGg69A8ee	192.168.1.122	55059	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGjR6T22aXNqHzUxS1	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1348769.448314	CgUQ3v2phiTBGY94m1	192.168.1.122	55060	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fo9MVr2AWUWHbqVBZ1,Fn2eKu9PKMrRk05p7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1349417.138815	CQLNQ3vG7DIpWCjXg	192.168.1.122	55061	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVaL831anxSWVag8c,FDhIP61JlBzt0HduOe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1349689.892978	C1aUR91kVk0G4SMr6f	192.168.1.122	55063	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXGdlE43wtdsz0aDGf	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1349824.930953	CD9okp3Visi8Dv3s9b	192.168.1.122	55064	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBxCMc4Ahg8B2d2nL8	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1349958.246768	CqMyoh390R2ZCEP5pb	192.168.1.122	55065	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWjlJ24mr2wNzGTrvc,F6LwOz44mmmPlpnQd1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1350298.716404	CXULIK3RQPNdZpk98	192.168.1.122	55066	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2kEel3W30YD7yyXY2,FgIeAe1dqch9ilG5I8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1350636.462900	C9AWNxqgTCSRGBqPd	192.168.1.122	55068	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fq6LTscwfx0Ycgyn4	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1350768.518048	ChL3FI2RSUOti43Lof	192.168.1.122	55069	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPivEl3vCiK1iKL71	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1350943.834030	Cts9vu4Nje8l2i11Wb	192.168.1.122	55070	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPMssy2PuVkEPi79if,FiyZ9l4hCrvPPAQcYd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1351560.511327	CWFKwk3BcveBePXmb4	192.168.1.122	55071	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F614y33cGylpcTmni3,FRbMknTj0MM4X4P6j	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1351814.306796	CzM1h635ANtqVHc7Pl	192.168.1.122	55073	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLhOP93GavAmdpd7j1	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1351966.389568	CPfZWD24hv8A3KwlXf	192.168.1.122	55074	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FoPZwU2s731HKxoEL1	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1352134.706088	Cd6YkP3QuVYD7xrA0e	192.168.1.122	55075	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcMwxu1N6pgdlqpVYd,FrJK3D4JsmfmIQcVgd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1352432.874635	CZqt9m1cAbSAGBkeic	192.168.1.122	55076	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUM0HG2AzeyPg8Pq68,F31yx5nkJmzVo5Pqh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1352713.668539	CZ3Zo51a35GDr2BxZ3	192.168.1.122	55078	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIBjl93PX8g990vyC6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1352877.740046	CQQ5F01QQ3JkBJ1uhk	192.168.1.122	55079	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8xbaZ3fjxkOdTtyI1	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1353023.073205	C92h8H3X4QS3iT6Tfi	192.168.1.122	55080	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtIxf72IkJs4hsytQd,FvShfx4zqMdhrrfDTf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1353671.745858	C5FoKjXe6oxei6bGf	192.168.1.122	55081	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfKa1k4TIDV5yJHNA9,FlUn3Q1hWWXLGexZR	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1353944.541311	CKxoX34AGHOUHxujk3	192.168.1.122	55083	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3xgH71pvJyIfeTmMg	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1354108.659402	CRyO9c2FssdwUgKb18	192.168.1.122	55084	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOrSCO1xcTDs2Ht3uh	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1354249.987387	Cbi7ach4PEoNCA608	192.168.1.122	55085	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbE0SV2Er0EF0Dykg3,FUcdwVvLf6GIjllk2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1354805.666863	CPiLeA15i1DeEqUbm6	192.168.1.122	55086	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0qExf114Wq69Fdeb3,FvALal3oVSOOTTvBq5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1355113.423838	CNDeCH7uAtbwzkiIc	192.168.1.122	55088	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FvdS1n2xcHOFulxx56	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1355246.486100	CFixtf4iKcy967TT82	192.168.1.122	55089	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdNFcD3nf0ZM0Nul42	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1355375.816010	CJcy3515w2j6196Hwh	192.168.1.122	55090	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fo35Sm2WU88ZfiuiA9,FfjQRv1s9vyCTvgkJ3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1355945.485131	CSbWpR1iPZjj7ZsiOj	192.168.1.122	55091	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUUTQr1xQ73PEVt7A3,FMPci13zwP098ljc52	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1356287.243563	C6qUBy4Z1OXgD2UaRf	192.168.1.122	55093	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fo5mRs2MKck2lBbul8	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1356442.294872	CP6gOO3mi40DJ53D09	192.168.1.122	55094	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FzgGqe2ymEhAYA9Fa5	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1356600.627446	CfQlZh1kHl46amn9Ld	192.168.1.122	55095	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FStPsg21vhNu0RxJnl,Fzvffh4YRgg0rK6DM2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1356931.803141	CCmtZR1rgAOfoYtzOd	192.168.1.122	55096	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fp5EVV2MdhaHQWVzvf,FiDJeZ1HNUW5VwkQji	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1357225.582879	CtwCNvAChaIDgBogg	192.168.1.122	55098	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUkMDJ1yMJbQvNupue	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1357376.669058	CtUlP64WjHEVS0Rfq2	192.168.1.122	55099	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FsDIxB2iOz63rwXIN8	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1357545.996262	C0EXl7B3PmR2kXleg	192.168.1.122	55100	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FR6WOV3vPTVnW8mdfh,FV8GGuFF8x2VnF3J4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1357888.168584	C6b4Nq4D6AtlOEFoH9	192.168.1.122	55101	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQtEabUzF0Wb1Rhyl,FnopTy1z6dT4jry1Lh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1358191.945674	C0FojL2PvlPI2SNys4	192.168.1.122	55103	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrmyTS1OofesoljfG5	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1358351.029035	CSv4VUBwDQCZ2lZ67	192.168.1.122	55104	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FURoOv2PDVXnupCqph	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1358472.358793	CthaMH1WooCbfTv1Ui	192.168.1.122	55105	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FF3RpmAySK2VggtDi,FFCJPC4bkVd9s84pg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1359104.026644	C143wl4iC2TXCuDfNb	192.168.1.122	55106	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJztry37DmDTRswfSk,FX6yIp4zK2GZ1jvvll	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1359375.803745	CbPT5nbxPvelyAsd8	192.168.1.122	55108	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FtBqHr3VK5gPHcgOT6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1359528.863174	CxTE532PE9aqgCFwX1	192.168.1.122	55109	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUgFS82yRgQFEDpwE3	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1359685.191824	CSgL7S2kNoosv3869g	192.168.1.122	55110	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrH3qZ3xzInnv6fPJ9,FhSuf8FdXfgGRLB2i	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1360290.872766	CIEm3s2fAxK0oUsPfb	192.168.1.122	55111	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfUwo82YWHUDgvTkZb,Fn6YGsFCmLTMp3E2j	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1360557.699376	Cb0a4w4XuKVk5qpIT2	192.168.1.122	55113	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3xYcq2cOHkePW7gse	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1360732.823925	CFB3hv3GBKaEXYk4ok	192.168.1.122	55114	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fi4s9D3WusQjcnJK2e	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1360858.158503	CGvF9v2meU6Wq1fND4	192.168.1.122	55115	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQfeMc2BjMi8l541gk,F3TXG31977FhbsmiNl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1361488.825237	C8hkyh1Nnte7wUt20b	192.168.1.122	55116	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDZgCQ27Ue1duzBeG2,Fjw6NoooL3z67TPY2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1361777.584119	C67KzW2RYMvgDOFD8e	192.168.1.122	55118	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5mwaW3VmnYcvO5te8	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1361914.653241	CPCTAQ4h928iQvSf	192.168.1.122	55119	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxPVa1tNZQroosaZf	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1362060.988420	CyrVZnIMwpVzlK2Hl	192.168.1.122	55120	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYmyYx10RCFOnA7oh,FIVIOC2kN7mjAex1Ke	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1362720.656526	Cr57p318YqqnG7mtA1	192.168.1.122	55121	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5aqNA2pJyLhWwqBx4,F8gHnx1jmTwI1FykB3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1362996.436051	CdXENn1HURXQaIp9Ck	192.168.1.122	55123	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fi7VkvksJ5ihIjZ2b	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1363145.502379	CcXko13mAb23ilIYyc	192.168.1.122	55124	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmNyPi1i4FWcPnRio4	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1363306.829260	CTJ7NNwmtBMha1K4l	192.168.1.122	55125	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fp6XRn1d8mt33FiYUk,FtE6EX2O9r7xBoKywg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1363900.493927	Cex3901OKnM9JbSaC7	192.168.1.122	55126	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQ7iaa4XQ3lbQIDQN,FdIwaTqf4WXPPMTe9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1364215.290861	COKYHB2rqh4Zc4Wvjg	192.168.1.122	55128	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fvew5B1KIb2xtxJSI5	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1364359.408045	Cu9hgfNJzdStrcJde	192.168.1.122	55129	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FTiPKh2oNztlnZlHj	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1364518.731540	CQALyOuuFxRVD2upb	192.168.1.122	55130	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlOjckwdIrSXWbTW7,FeX9H71zm8gWqBrnN1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1365136.409679	CY9KPP211XCVOA29Rh	192.168.1.122	55131	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxtCXc1OVElatm6s58,FgDOYt2sumEDmmVexj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1365460.199648	C0IAlf3apxDKykmqce	192.168.1.122	55133	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTfhxX1fzHgKW6cwE8	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1365606.291410	CnH8Afyden297GpK2	192.168.1.122	55134	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FyTSBvWH6kIvwvEcg	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1365771.613624	C72JeJ3GbdlNHt4xb4	192.168.1.122	55135	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fmxr1k3rcGTodTi7x8,FO8XLq1BFKRZ5haxkg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1366323.276896	CFKQl87Hx7taOyyka	192.168.1.122	55136	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPiWsK1ehvc6yWc2u4,FK307n1bKGMr03Jma4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1366604.075469	CEnNtf36YTaM6EJ8r5	192.168.1.122	55138	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhaQQ62IPKN1gcWn2j	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1366749.163983	CHeIW22dEbLBoysDk	192.168.1.122	55139	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FFvY2k2ViG8CZYeGU9	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1366914.496118	CwQYG84BORfBw6yORc	192.168.1.122	55140	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4UiSZYC6gEsbvWh,FNEjqv44sHTa6QQ9v8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1367238.962580	CvXk6maBd5W4trosc	192.168.1.122	55141	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiPLIZ1xB7ashNZ79e,Fnr5zO1sIaXgbOAd66	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1367555.727960	Cz6vc31EX8bX7FwN2g	192.168.1.122	55143	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAiZwa3tUO83hwhTo1	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1367727.801266	C1h6oC1SEbhrB2PAEa	192.168.1.122	55144	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fur1dD2Vb7PUoVuXf8	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1367875.137594	CbpaFp2MlhakOeeMud	192.168.1.122	55145	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlHH4j4AOdYQ9XaHC6,FTerUT1XWbq5VDQDdc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1368487.818071	C8Sedw25rFoSdNKQWj	192.168.1.122	55146	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0GFihJhcjnWod1Fj,FdYdol1g3mwQ3v7A7a	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1368816.593459	CAPX6IN9xb0aFVnN1	192.168.1.122	55148	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fnyiqn1ofwFt5CC93	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1368959.642735	CoNVPQ3P4jpAZGRSZe	192.168.1.122	55149	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3Qhhy4y3fVLKzMz8	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1369090.975194	C7BQ29nzU5VxRfG2j	192.168.1.122	55150	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgptVA1hJZ7tf6XUge,FdpAxeM0iquSmtYW2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1369713.650802	CKiIBw2dVpqvnCTIVg	192.168.1.122	55151	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FT6s9t41cSMxCP2Wz4,FDBkP23NFVGd2BUlpd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1369994.439946	CSBMT8DhjXcACBcCi	192.168.1.122	55153	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7uf2z3z4UDXr7F2sa	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1370138.537552	CgXNOW1CZxLJ4HKJ5i	192.168.1.122	55154	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FK72QR1mBjGTzQNXRg	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1370301.866574	CafTZ6317Fq87U7fri	192.168.1.122	55155	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuXagrTYIZjAYdry4,FeXuaY22NqEN2L595f	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1370955.536267	CRlbTX2dqUGVPrrkqf	192.168.1.122	55156	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgNg081vaQzXLXR34h,FXmdvA3ITtZWt8pZx6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1371558.512085	CZEniBfCesUhTxLdc	192.168.1.122	55158	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKnySymezstRYgEHl	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1371685.592381	CpNe4o4CMDWCJIKM44	192.168.1.122	55159	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6lwLU2C7Uky4t9seg	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1371846.916486	CBRqAq3ttrlp5zr94d	192.168.1.122	55160	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsqTla2gWJchOph2jf,FKUhmP2zev33PgUb7b	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1372118.097417	CqlbXCIEZscMkkwW8	192.168.1.122	55161	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAJLDh13L2ZtXtfmB8,Fv4dVb4dkW3JOfcnz1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1372458.856240	CFQNmq1VcNxaG74Du9	192.168.1.122	55163	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8Z5e94sKYBhN48R3l	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1372596.901645	CVgZq61Scfl4GXE2Ll	192.168.1.122	55164	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FkFkKSaKDFsrrLW2j	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1372776.243747	CPjyVc41vanT4tPmqj	192.168.1.122	55165	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSGFDj1aiZESN9RL59,FnYDfr36EFDa7v6Bq	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1373360.925221	CT0TD727ReEFvDxUn9	192.168.1.122	55166	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FciORy2IrjMruMm7Tj,FOhidr4cogFQbfE3Zc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1373672.714257	C6UPCotcyWoVoBbg1	192.168.1.122	55168	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8cP5a3xdyWsitOq67	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1373809.805990	CzVLdj40cGFQW6WOrb	192.168.1.122	55169	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSRmDI3D6lSkgyVA6j	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1373958.133118	CsrSaf1IHP50sVcuf	192.168.1.122	55170	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fa1bjO1uAnO3NB6DV7,FAdkkZ1QQAuXLQycfj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1374549.813974	C0v5G43fZzleIeZ3Ih	192.168.1.122	55171	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxECuz4u74DeAODfe3,Frk6G81WyIfIgEzKw6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1374851.615418	CEoqMS3e2S0bn9cj0g	192.168.1.122	55173	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKNJca2tOkCJpzFvrg	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1375030.731085	CJz3493IJBLi1Kaan	192.168.1.122	55174	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlopHEhsBbbEmBWAg	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1375163.066174	CBBWD31hyRMSooxUS1	192.168.1.122	55175	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlfNno3CYwCKw9wDIj,F0ur793Yzy5VptKDSa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1375789.747027	CVRhgj3ahtKADB4Md2	192.168.1.122	55176	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FV4NBS3CPjKISw5ya8,F4MS5Z1N6qlgsvCQWa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1376093.220888	CyKZlb5qlru5AZA0k	192.168.1.122	55178	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYMPOy4Xe4ME0GgAej	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1376258.285733	CctVdzkg79RrBHpLd	192.168.1.122	55179	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0UIYF37WBiRxKF41d	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1376416.619195	CbwO5u16DFsBdBHiC2	192.168.1.122	55180	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEUthj4UgiEwYqbJ3e,FCOGxj1vYKvddl14Ch	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1376686.796255	C3R5ku1trJ2NBsXGzc	192.168.1.122	55181	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTaaqA4ylKOIam0wZf,FwKtj926nJQDtE7X6e	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1376978.567310	ChIXphFwcZNdhNJb3	192.168.1.122	55183	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAtJWRiywcBTYKdFd	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1377110.631761	CQ3LSl8sqC0M9C9fi	192.168.1.122	55184	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fci6Jm385P5CGUTyCl	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1377247.963323	CRToKn1xjnKC6lXRsl	192.168.1.122	55185	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5bLQB1mvrewX29pH5,F5JqNC2HhOtGYoZwkb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1377529.137604	C3QjJa2pZKjO6PXryj	192.168.1.122	55186	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLJ9or2P9OBO81vOI9,Fs0HPEIBnF4rTFa63	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1377833.917114	CTN6F52lEitJHrpmP3	192.168.1.122	55188	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGSbZk2KTW509X68oj	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1377988.002815	C4hOqExVgXAhNScza	192.168.1.122	55189	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHG2sZ1WZWxPf0gZd9	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1378111.334497	CvU3kEznsL2JVkkA3	192.168.1.122	55190	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJhEfe29IrcIajRTuk,FpS93b90yNrTlj8f8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1378695.023792	C76QIx40tv3QCkw8je	192.168.1.122	55191	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FL6src3I9JmkCohvr7,FSEeFT2JLz5BKJTLv2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1379024.508251	CD4lMd1Vp5HeGd8nCe	192.168.1.122	55193	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHFOUiQgcedVxlK26	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1379194.608174	CYA4C9fruBAydUHkf	192.168.1.122	55194	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPIrLQ1Tp7PnULRLab	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1379344.938888	CxJNYZ1eKf5dG7a62i	192.168.1.122	55195	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMtZIH2yjKUx8nPMhd,FRokb02mg3Ub7C2Hbb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1379966.622464	C83dMd4qfZq5LBo107	192.168.1.122	55196	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FR0zZB4S7TBxcIxDP3,FjuDsg1qxhCkbF2a4c	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1380284.414730	CZdAOq1MFlKDBQmzNl	192.168.1.122	55198	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNAOTz22rysFeSgEc5	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1380441.540952	CczPt82SzFppfVw9f9	192.168.1.122	55199	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F40ICQ3GFgcTmtC56c	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1380602.856907	C5UWwCvacnCMrcdj3	192.168.1.122	55200	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhpRbv4xfXzswpm1e5,FdzsH82QvsFynFyc45	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1381177.543354	CwF1na25HkU9g1dBkb	192.168.1.122	55201	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkdXOu12Aj0iM3C487,FR6rTA1t1DDF5LOeO3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1381476.037428	CYber81GVkrK7PSsJ2	192.168.1.122	55203	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCHtW03W4tLmjFgxz9	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1381637.129812	CPpEEu3Gre8hNTBT5k	192.168.1.122	55204	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FAMaY23igB5oQgXhQe	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1381759.459947	Cnr3Ue4AbFx9Y5L15e	192.168.1.122	55205	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtjnTf33sRGzB0Ayje,F369UO1BtPr4Y9BFJb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1382382.145178	C66M6p1fHHMGSoORo4	192.168.1.122	55206	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBLKoC2Tr3ybmch1x3,Fr9Fjw4ZMZDHI8mpH6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1382950.141270	Cmwr3U2DYMvXNA1cga	192.168.1.122	55208	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FA0OPA2wwybsGLT5qc	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1383111.220387	CtO6cu3PFV78ZzwAPc	192.168.1.122	55209	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJS5t74ntYbBAOp42a	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1383281.547762	Cy0n2M3DlekNB5JOD5	192.168.1.122	55210	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFPn784j9Y62V65eTj,FqxO18CFcURJWoBta	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1383918.233931	CTzEJU3LLAa8fjltZb	192.168.1.122	55211	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsmQzKGUdSajEeGSk,FOMAhn2XsKtBhgm5T3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1384251.991122	CUV8Ye3r2iHRisLG23	192.168.1.122	55213	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMAZW14M4lpJ8qMiR6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1384425.048308	Cb2e5a1WYth4hiCbsl	192.168.1.122	55214	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FkZ7z52S9CsZ4vsVtc	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1384590.380686	CFg9jU3l9yuOPYvTK4	192.168.1.122	55215	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDJD3NJpAUA6K6Rg4,FzpAYa4JreCK2PhElk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1385234.066403	Cmaszv2lljFOptWTWk	192.168.1.122	55216	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcB7C523W84hH7xfW7,FoVkHC2MO4eBI5cNi1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1385516.863106	CmYDoHHbqsl6kNz44	192.168.1.122	55218	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGmmLN1Pme6bcKaqKa	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1385653.954368	CaCbXsQlHnTvk30L	192.168.1.122	55219	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNsWF12KydcUVYp2Hc	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1385785.287772	CxKBYM3dPVdSbqIQu4	192.168.1.122	55220	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fh5o1d2iCFRcRjS977,FAg5aF4OHGFdBG9jRg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1386094.752861	Ct9oSO3cEo12ppY9x1	192.168.1.122	55221	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F690vA1wOclc0TmcQl,FU9J1A44VHPporkD64	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1386397.531056	ChEZxC2pEsPOKAQ8r2	192.168.1.122	55223	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5oqfr4s5wZRK8gkyf	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1386547.579701	CqnQRGqdrNX5pQYLe	192.168.1.122	55224	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqPD4z2vlzDFBkkrRi	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1386705.911731	CxDHIxs73TgiwDoOg	192.168.1.122	55225	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRhtT84ovTKcI9Ursd,FLPtl93wx9qN3ePjll	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1387314.577334	CSvNhp2C890bFHGCw2	192.168.1.122	55226	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQnXZvNNdR4iP74ol,FJylcg23V9wLczHfIl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1387614.329694	CA9LOf3tpetrnlSVo4	192.168.1.122	55228	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FuyqVR2dh7FzTyvzna	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1387785.369104	C3KKbV2oJxa6oQpwye	192.168.1.122	55229	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhOdKF4iBgnjRE2M71	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1387932.705675	CZSggrS9eFOW0nBzc	192.168.1.122	55230	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzddRi0iTQdCE30Ca,F6YSbQ3kaxfRsnqXPb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1388563.372443	CZfI1d4WZMliBheLCg	192.168.1.122	55231	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fei2j02liyGUlmcYYd,Fsujh72VSkpsN11aji	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1388856.193556	CjT2jC4GfFHkEnx6s	192.168.1.122	55233	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4nwezrgHhhoTDa8i	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1389021.326486	CpHcTW3OnaOuvk5sOl	192.168.1.122	55234	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqBMQW2voEhMHTXXMc	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1389148.643651	CynOZu20E4bqcqGzxj	192.168.1.122	55235	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuLeNfdi6mhTh0Jba,FSZaYC21oMTqNn7Mod	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1389745.311765	CIulbD4slu9KczqO68	192.168.1.122	55236	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1qpyj41kxY5mQskUj,FrA7gixUJpCcd1nB8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1390317.316635	C1Ueui35aBN37jmaQj	192.168.1.122	55238	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fnp2uSl1qTajwofJ5	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1390444.403565	Czn9hl18PSWRF9zd7h	192.168.1.122	55239	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FTfis93LMuC1so7VA7	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1390580.731834	CyIz1f26yLNJtjH9X6	192.168.1.122	55240	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FU4P3J1hId5qLn9h3,FQmQUp1G88uXEbsqxc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1391143.401980	C6wTIk4B5dAVKLpL67	192.168.1.122	55241	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fum16A2DSn4clZcB9c,Fcvkdm35AEfI710Ez4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1391462.204459	Coaj282KBWjiFMZq29	192.168.1.122	55243	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5sj0H3s8ZdWxr4bie	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1391638.329079	CEN5XUXWsDSXSikNd	192.168.1.122	55244	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxjlAw4wgEjitW7bw2	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1391788.659618	Cg768527rUIwo21hp	192.168.1.122	55245	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfIfms1DyfDYIl4rae,FW1Ypw4CTevaTaGvU3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1392384.336220	CAQibVbY3HrMtmBX7	192.168.1.122	55246	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5q6EQ3rc24Yb6kTsc,FnUPrc2eVzO6j8WHQ8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1392665.108721	CwEPB61AgPAWuFeaYj	192.168.1.122	55248	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWR9F12YlGVgldpEUi	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1392802.182637	CWORox2MR1c3bDcma	192.168.1.122	55249	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXZc6P3wVnzEyfmoQ4	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1392927.517234	CL05JqKcjRjyo8zEl	192.168.1.122	55250	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEtu562qMbszP4VuY1,FfNhKt3GClqrCvf2B5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1393577.201572	CnV4a21KthoOBs0NIk	192.168.1.122	55251	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9POHM3vmYc1ZZt6W1,FtMKfm3YHIU2kwhVQ5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1393892.970957	ChDaxuqvjbEMjJvr	192.168.1.122	55253	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FvIy0Q2u6hdFAGvUH1	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1394048.023928	CE6B4n3z9PeTLFpgI6	192.168.1.122	55254	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBljvNTTwOMlbex0k	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1394207.357190	CHvOr62Jn8ZqZG3mg	192.168.1.122	55255	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlWaVR2UDBDOK0SIe4,F3PLzv1A0VE0zH8CB2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1394828.029549	CZ4pbOKe6om1fbVqe	192.168.1.122	55256	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlNeyg4SR28kBwVBgg,FCeWBR2Asq99HfatKl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1395153.833055	CVxmvm33SWDvmOlFn9	192.168.1.122	55258	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUxtqZ21qbbfr5qORj	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1395314.945232	CbQ0CV1dmOTgd6d5Sb	192.168.1.122	55259	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FTbYrl464Z4SgKunt5	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1395469.271514	CcZNyNCphnsBJrcp3	192.168.1.122	55260	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4LueO39nwvaocoE9f,FEbF8z39760JH1qg4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1396092.948312	CNL7YC1w8tqd7Dm7M1	192.168.1.122	55261	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3J9gD3ky7omBwlHWj,FrB81d3JQhXtaJPm9l	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1396406.726042	CLSnOX2gLTphxO5qc	192.168.1.122	55263	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F13SwV2ShlieD7fsi	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1396537.793385	CZukLn4656CsglHpUf	192.168.1.122	55264	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FG3tKi28DgKPsFPrHf	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1396695.113755	Cc48271Lst3PxzBjl6	192.168.1.122	55265	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ff2imlGYnW81krNf6,Fg302v4Cuu1ej0eld6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1397045.287855	Cs0ti33KkU1pZJf4r2	192.168.1.122	55266	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpD7nk1vNSJzbsZNN,FAxCF33SW2ALPzmzZ2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1397366.047131	CwtZyQ3Hiq5JRDof62	192.168.1.122	55268	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlSXBX1nBt2at0zRO5	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1397525.093276	C4JtBcVCRZNJeC8Rh	192.168.1.122	55269	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0lFZu3SCG3d2vVvV4	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1397669.414765	C8TaeP3ri3EJdf0FT1	192.168.1.122	55270	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFVXyf2Sdu5FA9GDp3,FbnhiV3YB2O3HkPzeg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1398230.090829	CLVR6fTb9GZrXqFSc	192.168.1.122	55271	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBG4RIWjsSOQxI4Wa,FOML9p2oRrGKeSHHk1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1398503.896777	CqtidA1kowGuztNMD7	192.168.1.122	55273	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FjQ5iv4b27srUA6BGj	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1398669.999029	CzMx6m3UOpxFu6cFY3	192.168.1.122	55274	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fo9qA62E8QGcOYN3ck	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1398847.328488	CsskQox6j8q8dJ919	192.168.1.122	55275	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRWROI3T8QufSSYTRe,FcACwE2q6olKUXXa28	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1399397.018630	CmJYBl0G1zUY2G5t6	192.168.1.122	55276	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfS2CUoIe2xLzuvFk,Fit38snfwStxKTmyk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1399687.817496	CLHONQAvIW6OkNj9i	192.168.1.122	55278	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhsHQO2ygnvYRJ7nU4	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1399864.937415	ChkIGw4MQo9LXI5qc8	192.168.1.122	55279	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6Yeaz2nHctj7nctaj	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1400006.254397	CG4A603gvhGtaTdYxc	192.168.1.122	55280	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Feb3z93d33pOISxBE1,F8Za2a1lBvvFtVmeS7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1400282.431671	CfMnAR1j31zb1l3204	192.168.1.122	55281	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIpxL5IO3pvbccZJ5,FBan4y3RbXqqBLdAjf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1400558.225764	C1EOnn3HopozsFF4ge	192.168.1.122	55283	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FtiTK2A2DZ1hfBjm2	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1400687.299723	CofSLa2NwZv1aidlV8	192.168.1.122	55284	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2Aqtk2TjWlnF3qd08	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1400821.627145	CdgL9U1ASZIeU40k4j	192.168.1.122	55285	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQJJz635eZPKbiUV83,F0YXUD2Ww455HdNi15	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1401432.295698	CU5Lwq1r1BcXEHmZi	192.168.1.122	55286	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0efvVuiotRLDRr6,Fut8sz4B9bgxkrhQZ3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1401764.113455	Cc95FL1cglGztTx6Xf	192.168.1.122	55288	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FuFJVA1Ck4yw7QnIe8	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1401926.221061	CyDB251JRECo8rYXI6	192.168.1.122	55289	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0pV7kaPMSmeIFsCe	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1402073.547070	CK8luX35gBsWQZxe8h	192.168.1.122	55290	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFarrH3szqjB7pR40d,FE0cc21CCDBFsj2Jek	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1402696.222074	CdiNE83rcEcBXhDj28	192.168.1.122	55291	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTYrDi4PR0Sf2ablN4,FoGtgr3QdX9ZY9XOkl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1402983.043516	CFKHBr28jKvwduDPbd	192.168.1.122	55293	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3LCEJ2eLHoMAw9y68	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1403150.170668	C81hdP19z5yGbipJsb	192.168.1.122	55294	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxYCj43KYYi0b28wLj	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1403270.497995	CAbNo4XknG6dEdyQa	192.168.1.122	55295	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FenNcpQj8cNHgEZre,FgUcmOtoroYVbolLb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1403892.181793	C2Ww8O1bagKxUVjd38	192.168.1.122	55296	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLc5zl1QzmB9ygMja5,FGlqtp24nUNrTMYSG	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1404216.945769	CTxwPjAS0UTsrSFek	192.168.1.122	55298	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcjlFv2Zzys55YLH5e	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1404391.986149	CkLqgO2OKXBmpu1bz3	192.168.1.122	55299	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FW1Qd92SVIxlmx6B8h	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1404528.315887	Ci4SQD3xfZPjGmBaz5	192.168.1.122	55300	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWDPxvTy0czacWa2b,FC4SK1n7OLOTErwZ9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1405134.998660	C2m1wi1dCIO0CNICQd	192.168.1.122	55301	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FX9LLC1S8p4fLbQEdh,Fi3eqv1VOYB3B5Wqz5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1405436.752117	ClraQA4FWrHBI4lyT7	192.168.1.122	55303	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTmza7376rprAzvjag	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1405591.801919	CFddag1O5n9dVnBN67	192.168.1.122	55304	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1Ewo53E7AFV8OSJb1	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1405753.127365	Ci7Ns22das1768bxFh	192.168.1.122	55305	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fla1J335U86VtEeSz2,FfxJrntwnHO7iggA8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1406319.805944	C04yCA1typLs7qDQD6	192.168.1.122	55306	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fzsv9749f6P2CfL8F8,FjsCrO1nHzzl6qyBxk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1406923.767163	Cg3hhh2yCapmaEuv7l	192.168.1.122	55308	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fc6tfi4Ntp2mMwXEBe	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1407075.855957	CWlFnOvzJoxqq1rl7	192.168.1.122	55309	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJSwqJ3wbAsmL9dIZ9	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1407218.172581	CANejjOvds2I75zy6	192.168.1.122	55310	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnTGoY1gKj7Dwv0Ju2,FuWuRk2pEjxeL5dV2a	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1407822.843261	CuQEq41LBoVhU3Oh3d	192.168.1.122	55311	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfV34rTzusHuJSv6c,FyMRXM2xxScXmQv6oc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1408104.625748	Ctq8ub2r0IUk70vPKi	192.168.1.122	55313	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Ff2nOV2GJGsiQznXV4	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1408243.723805	CO6kqN3KCo4e6TdUL4	192.168.1.122	55314	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwYv5A4St8uph17t6k	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1408389.057798	CFDA6D2hMHJXJJDH7e	192.168.1.122	55315	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqlIF64ZYdjsad44qh,FhpkrY2chm43eKMgO9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1409009.729847	CzBnUj1gH8o6sB5Zol	192.168.1.122	55316	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fy4bVFttul0VtiON5,FLc7GI1U7wxa2t6h1i	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1409297.497962	CVPUG73jyq6V2pREf1	192.168.1.122	55318	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0cP6Z2VPJCZMStYBc	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1409451.560331	CzHDXE1uajyXRrzcH7	192.168.1.122	55319	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXK1uu4QzZM3U5x2Dd	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1409605.886762	CahMo74JmWuLKaskye	192.168.1.122	55320	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtV0m91XNyPgPxbP6c,FFr2Rn2KR8OlJDGBm4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1410245.577156	CNKUx02zUExIaNtxae	192.168.1.122	55321	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkvTbA2wkyaalb2vd9,FTe8gI1weYCz8DQgEj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1410542.362658	C1ghFxb0usnE45Tqc	192.168.1.122	55323	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fd2SHVJAzchKksqje	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1410663.443645	CB7QHz19rTXQrSt0rb	192.168.1.122	55324	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FaycgD3No1dSwgwsil	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1410803.649162	CNrVy64R8liSCgD7Y	192.168.1.122	55325	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIOehrL43J9yepBE8,Fox1Au21Id76xYz8ce	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1411390.322464	C276Qf455HJ6vOfOW	192.168.1.122	55326	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfFrSp4RLVYoF275C,FIsCs44NQR9aPW2K71	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1411704.116201	CCpILv4Mosgvgrh0ee	192.168.1.122	55328	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FX7daF2dxTEKkGfCh7	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1411875.235741	CRml8C2ZJMTmKzXLq5	192.168.1.122	55329	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FEBAARiD33CikAz0d	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1412010.564486	CD8MT03vI2R34dI4f8	192.168.1.122	55330	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMrwot1dkmUUVvBYu8,FR5ci547xuseqWfexh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1412594.243345	CuhOhC1Iua3m34n1bj	192.168.1.122	55331	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FF4FjL2tZURnIm76Yg,FzTY1C1h7AXmfabUZc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1412882.714338	ChdJ4soqxhHkLlaxc	192.168.1.122	55333	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTEejukPwVCVvAPLl	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1413058.756822	Cba4vb1LxZZDJt2fBl	192.168.1.122	55334	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtNShX3mZERNV51CJ4	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1413191.091447	Cqc0cb2WCNoAxBMFZ1	192.168.1.122	55335	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FP6fg22EyASEVisms4,Fe5Ook2VnuNrCMkHG2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1413491.273518	CMUY06h633kR1f7Ei	192.168.1.122	55336	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBy2Q029r5rhSQSya1,FCyTqIIkkYn25aUt8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1413776.026034	CvnETA2At6JyNxOtd	192.168.1.122	55338	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4RgEBd7Gq9A52Jg5	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1413927.065287	CMqOZd1V4u3PIK9Hh7	192.168.1.122	55339	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FpfoCl2SlJzbkVKHah	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1414059.389997	Cn48rc4jj8N3qE0dGa	192.168.1.122	55340	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7ssKn4KvMXiUDzIs3,FAVh6LzsVIfjUdJq6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1414375.565065	CrArrM2ZuSllIwFmh4	192.168.1.122	55341	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJb6mk3Geyuo5denca,Fh7Kv22PCfsz6YC1Lc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1414657.385936	CJwXM34IIP7CMpG9B2	192.168.1.122	55343	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGp6fW3QgqlG7diirj	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1414808.472888	CztNCD2vVAvYxgsr9d	192.168.1.122	55344	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3KER424daaCeqHNb3	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1414982.787381	CYCsvm40y5FSRQgYp2	192.168.1.122	55345	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMvhPi1svqXpSR2nZf,FvlkbJ1vWWwhZMNC7d	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1415627.464517	C5f5PS3iolYRTta3Q5	192.168.1.122	55346	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fky4Bq4ghjozy7tkhg,Ff6Kk03zCQ4aK86KG4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1415941.285986	CCbgk83vwk3uV7YKHb	192.168.1.122	55348	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLCcui1fzM5r7xoRr3	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1416094.411449	CxAcxQpxAB7kn1dLl	192.168.1.122	55349	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBCnNt4VkdtwAikYY5	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1416238.753744	CqST4V3DuvvkEl14p4	192.168.1.122	55350	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fx9rYm4dxiAvi7WUu2,FO4n3n2rtke92OxQt1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1416862.430090	C4CTov2WrWLu91F4z1	192.168.1.122	55351	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUdkSL1EYpPp6EDDIb,FQn9Mv1FAAHMUVXAGi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1417120.194415	CnFIvE2uHWqyQYZxFg	192.168.1.122	55353	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNcvHB3nvj3JbkZEe9	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1417267.278150	CDU0Rf3Iu9vKiwk3G4	192.168.1.122	55354	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtlnyJ3FKJZ7i2NrYd	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1417392.612832	Chcsa82ntmMd7os3w7	192.168.1.122	55355	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fyprlb1o68tj7EXioj,FROKEt2zSboB5fzCo1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1417736.776117	CTPmkk226hR3fBG915	192.168.1.122	55356	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtF9gs3saOSGWuDSq6,Fp1aOKJglgGls946b	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1418057.557384	C9p9j11rZVzJryprGl	192.168.1.122	55358	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2iVdLmmy1cDSMH04	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1418183.625366	CcFYC02reXvnyvtYO6	192.168.1.122	55359	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fr0U8n2458y1tGFgh1	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1418325.944394	Clml5h32MHXLwe6c5b	192.168.1.122	55360	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8yMqr2OiiZtDehsX7,Fikn6fihwc1H101N5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1418578.417342	CHtDtk3RwuOiP6dscf	192.168.1.122	55361	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcTbIE4gEJaqw2PIt,Fgrk6u3tDtpuA9zcbl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1418822.207355	C5MMbPFojqM89wtqh	192.168.1.122	55363	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FjAIxtAqsdNjwoAf5	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1418976.295085	CxJ1Vx1xJC0t5nR08d	192.168.1.122	55364	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJNSZ12VP3xEDaF4Y6	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1419100.628347	CovIM32MMZRKq6DMSa	192.168.1.122	55365	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJpzuOvL74T88J4y4,FfmON31HP70IM11By2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1419755.299960	CwZ08D4saly3hWQpv5	192.168.1.122	55366	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fqtv9f1V6R24IwPtD3,FE0wUs9ymllCcfHii	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1420110.071642	C51tPT1SOJxtnf8Wq1	192.168.1.122	55368	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnhvLC2Vgieg5cdU0f	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1420241.153650	CgwTeV2dKSrTlYK3Bb	192.168.1.122	55369	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYEEkr3k3EZwpQEE2e	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1420363.483924	CjJQf9441heNM469ta	192.168.1.122	55370	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNLzfE8wE6GZI0eEh,FEOZYF1Q2cmd5N6Au3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1420986.149178	CeroUo2V5u7Q99L7D2	192.168.1.122	55371	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiUDmI1obySivY3Hu1,FicMor1IumSQb78hOb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1421300.959376	C2mdXF4XpJZH9WZDxl	192.168.1.122	55373	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrhfOF2PIoYLYHBc68	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1421463.081070	CMza8w1fduQSZwajqc	192.168.1.122	55374	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fnx58v4s75JgqApCAk	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1421607.412382	CgOssb1Zc7cc7KWd53	192.168.1.122	55375	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FagEdwPz5OZ1xKVc7,F7i8t33o8Nw3fT02mj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1422231.079416	CLaEIf2opKworzbhdh	192.168.1.122	55376	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNDJyN3mzMgGI8fc79,Flch4p3vJgx2pgcDF9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1422533.868564	CZ2eP12MT4FqWhsDYk	192.168.1.122	55378	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDDdX52OMPpCk6sAdf	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1422656.967424	CLglsZndrzXt82LHd	192.168.1.122	55379	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLaEeGjvIqS1zTEj2	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1422806.296627	Caabcu3aH902rAZElg	192.168.1.122	55380	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBhSwJ1wRYLCzySFs6,FxA42H3nfsvVEN2G5h	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1423462.960147	CxR8zFGRAR7md2Ro4	192.168.1.122	55381	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFNEIL3Gc3APtSRrge,FWLDuN1daIdqDVmIU6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1423750.776395	C8GOza1e7mTk6i7co4	192.168.1.122	55383	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdD9vU34kA8vI8xv5k	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1423925.881381	CrT4Zg2QehevMwedAb	192.168.1.122	55384	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRU1Wk3ju2JUZe4sgd	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1424093.206632	C6zp8T3S3vNvGHb4Q6	192.168.1.122	55385	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXrwFSCpXaagwgnR1,FDvrPYFeMqSyeIBqa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1424636.878196	CB1oWl8YqGnAVJPV9	192.168.1.122	55386	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzZg1M2WpeyvENvK6a,Fn1cKX2Mgeo4IZ3XQd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1424926.655595	C89R3z2WYgQiGSUpUj	192.168.1.122	55388	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fqv4lA3XcK8GkEPsd8	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1425072.730630	CQvhTdoYeIslMNkdc	192.168.1.122	55389	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8hbdq4VnTod1JRbcd	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1425238.062394	CmTGVQBZ5EHJBCOE2	192.168.1.122	55390	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkIXfv10BQLezcVeAe,FgXwMl3NWCdWneHw3c	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1425509.242741	CYDtDe32ZZgOmP2bg8	192.168.1.122	55391	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKoCyZ2JKu8muaKpj,FD5xgC2ThRBN6Un6Nf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1425799.027252	C6M9ri4IPTd08Keh	192.168.1.122	55393	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4tz7y4Ro8tx3zhJW9	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1425962.109487	CmP0a83JVZQdv6ciVc	192.168.1.122	55394	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FTc5qM1Jr4C9ILiyQb	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1426105.439629	CpbrKu3S5FoxNY33pd	192.168.1.122	55395	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuOj0O2yUlt5NtqGO6,FMyU1n4oLOiJsDhkr1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1426759.119410	CyRGkb2gom4TLCgIB	192.168.1.122	55396	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5ckWx860YveWPbQ5,FCuS483BE7SYnJZfBe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1427024.895366	CZVyVQHOXFwsqkjvh	192.168.1.122	55398	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2Fuzu1jG0GduXOULd	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1427163.997131	CrAbNX1ZKb5WC7u79	192.168.1.122	55399	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FnJh3d3GFZ4lBcGsBk	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1427300.327090	CBmZJi2OcbsHrPKp2c	192.168.1.122	55400	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTB92y3GI7kICLSCGd,FMgTcC263yfx9tbj49	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1427958.994491	CQM05Q8OHOioLe80h	192.168.1.122	55401	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTHqBb1JTvn3md1p77,FWu5M61n2OOuf0r6B1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1428277.739827	CVESUd3NYecpchtJ05	192.168.1.122	55403	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAsmJu4dwn4OA93lPd	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1428438.779923	CpUS9l41cXyPqwc5M1	192.168.1.122	55404	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FFCCUp1FyUH0NpOqb6	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1428591.113333	CMxdwC3ReszVqZBNqk	192.168.1.122	55405	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjP2LGubsJMwSWiq8,FAVGZj1IOYHY1APh6l	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1429223.792940	CKrrCs3LFljwdbvuM5	192.168.1.122	55406	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdDz7Q1cYqcDbF6gI7,FUrzgP3zPlMNYZ9vY6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1429529.562426	CqvhI53DU1tYOSzdM	192.168.1.122	55408	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpMN9b2fyG24KFjE9d	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1429709.648353	CE3dPI1G3FwZX0RrPi	192.168.1.122	55409	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1eX7L24WMwQmGclDk	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1429859.997217	C0OvJ2tIbNZWlKJYh	192.168.1.122	55410	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuuMuE1jFrDz2k4K6,F2mq3j3jP3C836vxe6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1430168.161057	CS9921348soDe1KIO2	192.168.1.122	55411	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmTp6F22jip93tK9o,FmgWBw3jZqyA0Bqn2i	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1430416.923138	C0EyDk4EqA90dXmxo8	192.168.1.122	55413	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXidke2cj9lZ9hp6lk	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1430587.959763	CJbbTv1QQ94zR8baE5	192.168.1.122	55414	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSKXSu44jSU5NA5TOh	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1430743.287664	CpmzVfXNrwpNM2LY6	192.168.1.122	55415	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCJDuG3Uaog4ZOEyKi,FBqKDoEnHjfJw1QOi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1430993.457224	CKmfT71xioDTd7BeSh	192.168.1.122	55416	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXpX4Q3Y058NhR3Wv4,Fecl1TbtMmeIJmWqf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1431303.197820	CuFnSf3vGidpFxm3D8	192.168.1.122	55418	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FttESN3mfTmisa9vhi	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1431453.233741	ClUfZq10BFXpdJlsOg	192.168.1.122	55419	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrhXAL1AmJ7XaQ3SAe	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1431617.564711	CXofDO3O51d8Ox3GY9	192.168.1.122	55420	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F85sVg2IGLODdNJtYa,FGJyyn4hpyrZGHkXO2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1432226.239988	CLl2vp4jrb4BqbTweg	192.168.1.122	55421	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fa7pbc1OOVfMgOdv1l,Fqf00Z1zd7d7I2xpR2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1432550.718255	CRmKfV0bn1aTWqVuf	192.168.1.122	55423	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGvFHG1TmRsoRKZNDk	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1432703.812382	CkLV624irzLeq21oeh	192.168.1.122	55424	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUOFMx36B0GOJzHfMi	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1432859.130165	CbuSIR3OVIeLVtudU7	192.168.1.122	55425	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiqwitDR56QZioq0d,FI2i1qkFquK1lJ5zc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1433152.301312	CLxBmy33AKu7tU1FK1	192.168.1.122	55426	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvGohm3WEX0ksGe307,FXjqiYBlCYONGEuy5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1433463.063745	CQTSFzqv2PbDFJ0r6	192.168.1.122	55428	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJf5nA1VMSgrK32FFd	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1433641.129561	CdquNnp7mx1oEPXR2	192.168.1.122	55429	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fg1Noh1Sxtam65l2Cg	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1433772.476849	CtpclE19WxmLQklNRh	192.168.1.122	55430	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FM1ofZ3yaxCuiZ3zqa,FEjci647ATdrZJ5PLl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1434088.647675	Cl3hD01O4UmQvypYD2	192.168.1.122	55431	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4Doox4TjEcip3HYr6,Ffd8Zy1prhmUG13Aij	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1434372.161724	CHXxLD2xLvjAYc0QU8	192.168.1.122	55433	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYSgnr245NAzP2A2Oj	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1434536.276619	CK6FZC2mFTt9nF9lQ6	192.168.1.122	55434	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZJ5dp3YIbeIF1sIg8	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1434710.602924	COC9vH2RnO0RiFtGn7	192.168.1.122	55435	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJ5SSk2m3AeiF4dHui,FScyCH3AgkIXOScuP6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1435312.277142	CCvvQw4hInFQLddyU7	192.168.1.122	55436	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4ISWG9JoKYf1EH9a,FvOAQH2jgsMr8Dy5g3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1435643.051044	CDUEfG1oN15xYcOme8	192.168.1.122	55438	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fv2Hje6T5GXf9Gvpc	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1435766.124869	CwOS8N1UvtWDriLr4a	192.168.1.122	55439	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FF8PT72DstDvbsGieb	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1435899.451368	CNXKwB3XTDIZGZP5L6	192.168.1.122	55440	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQENGf4XB5J67Ob8W3,F1l11T3ocqtthuHgRe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1436162.639514	CAXcxz22Ww7ZB5Brr5	192.168.1.122	55441	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLy9Ec1ONZqsBzAFdf,Fv7ahd1qV1fJoEY0nf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1436502.432279	CVfGeS1DT5igybcWp4	192.168.1.122	55443	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fq3hkx3Bug68aExi63	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1436659.530174	CMC7NH2dddQzxAFtQi	192.168.1.122	55444	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fkahgx8RQ8dsGI0O1	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1436829.858998	CgCoaftD3b4mwQ7ki	192.168.1.122	55445	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDPL4A4CE5KraENzB3,FP89y62QFvOVcB9vA6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1437141.046312	CS2Ptjsb0lESuin67	192.168.1.122	55446	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnBQOt1yzd9xGQwErl,Fdcw5EgEHVTrFYWi6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1437438.803063	Cuj2sB1BsuR9tbdCMg	192.168.1.122	55448	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdsOZr4YwlhIbcK08f	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1437568.887309	Ct9Dtx4bdIWp3vXtgl	192.168.1.122	55449	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdkhJj4QUzk1qNpVNl	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1437741.219050	Cki5wd4nAWiFjRbI4c	192.168.1.122	55450	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVqREz3p1oSpOGWz5e,FZJiJu3sIeipgrx6t9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1438386.887699	CiElbs2KiHV9AjbGa6	192.168.1.122	55451	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fj21ko2KFcupnBIYO7,F2pXBW3qEEEADFpWw4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1438670.673224	CcZn8C4TR6A4YMVje5	192.168.1.122	55453	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJfrR4l9TtgIRO0re	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1438825.743965	C6Qclw44aOxluGU8Za	192.168.1.122	55454	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRQUg63Dk0gHsM9dU8	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1438998.066187	Cv4b962AWn5qbWkjO2	192.168.1.122	55455	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmhaQp3kutExuAc888,FQKKAs1sz19ZyDDUmd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1439542.739687	CtioSp4bslp3Yt2ohi	192.168.1.122	55456	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvtmpQ1uHrDqcTMaGg,FlzU2U2x0biWEmwkSg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1439869.249663	C2IkZm4LsxkNJarsk9	192.168.1.122	55458	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGYIrZ39eXqyzLhxAh	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1440041.382961	CX2i2JNWy53x8VzE8	192.168.1.122	55459	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7jewLLLjqdHE3pHi	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1440197.711903	CzvOdFUomIh2DGnCd	192.168.1.122	55460	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzMFLwNAPI13QNNi4,F1ZXPj2vetOvb64puk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1440830.380117	C4xI8J3v2ThBpHGONb	192.168.1.122	55461	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FycX4uaqR5dZ69hs6,FxYSpW29t7kqlJcoca	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1441156.178838	CSYqkU1j0DHBsHXYLc	192.168.1.122	55463	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FfV1lY1Y33p3pgq9b9	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1441301.273376	CR3JvH1DkEoiTLSEDf	192.168.1.122	55464	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHdEeI3lLH8Gwf0dfh	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1441427.600012	CGKlSP13kKfSS1RvFl	192.168.1.122	55465	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F496QyKW89QRdT8Gh,FwAmAo4FWoHPPexbfj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1442054.280452	CCOxWx1toBduJPBVyg	192.168.1.122	55466	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFr7882eD5ZDrTY8c1,Fs9wIU1479LkVKZaIe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1442362.775439	CnnYZr4rEjMthZk0c6	192.168.1.122	55468	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1ytdF1Aay27hm1bha	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1442506.867009	COIBfe14K0tlFu093h	192.168.1.122	55469	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7puDy48cHLAKKg4Qk	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1442669.195398	C1ZUC5lNuk6tTSIYg	192.168.1.122	55470	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6F6TokJd8ZTn0HBi,FjJrD43vcxFZdDDwQd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1443234.867676	CTT1Me431WbsYCYKFi	192.168.1.122	55471	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwPYe6JBKCZJiU0z2,FZzfmcfCVXXYz8je5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1443580.628872	Chv62tGCEwlnWuou	192.168.1.122	55473	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUZpXl2kUuJ9EXaURb	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1443758.676586	CH8aBM319mRLUyK7Kf	192.168.1.122	55474	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Flo98G36nR27ZazvUj	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1443891.011200	CXS4Cf28eLIVVFUp16	192.168.1.122	55475	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfdV8Y2XFfHGdKJffk,F2b39s3AX7WUrhjpt2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1444478.685950	CWWuC62NQRAvheKJhg	192.168.1.122	55476	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8RN1OrESbPBchcod,F9zgUH2p7h8OYGE6m6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1444795.479135	CaoV6M3nLAingttlJ3	192.168.1.122	55478	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FN9Z9A1nCtchq0jFpc	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1444933.565619	CDIvCc1Q4ohlPx4src	192.168.1.122	55479	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYfsqz4BxVIdY3vDf	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1445109.893935	C0RTb3VUDz8QZhsA5	192.168.1.122	55480	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F53Zt03M3V6LrMFQ6l,FTO02d4qYvHJ4km6Nb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1445717.557649	CbdsX75RpQxscsFC7	192.168.1.122	55481	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGRsODuP2QJUaJRSg,F6HRf54uK4VjY79TD4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1446032.070860	Cbbrt33n1qNvtRELij	192.168.1.122	55483	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqgyBr1OnB7mpkwMh9	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1446163.163554	ClhIFv4Z5hbYWwxDWd	192.168.1.122	55484	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FO3UxH3arSGZy8Rbf	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1446299.493959	CL6ff2V8igjpcNP0h	192.168.1.122	55485	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJqFYB17QlXyuoj1y6,Fn57he2IkhhXGJBTei	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1446937.168117	Cew3Hm13FVaRLZTmyi	192.168.1.122	55486	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F45LV3c7vzceqjTx2,F1SxWq3odkXjKSUAvb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1447205.656818	CCHV0C3Ek20hJ1kjv4	192.168.1.122	55488	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6oH0P1sdfzZkTT294	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1447380.734612	ChN4dR1xF7FNnEuj08	192.168.1.122	55489	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FucOQ33db0S0ea8nQg	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1447517.064800	CZqXlu4r8erinNStU7	192.168.1.122	55490	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4MLah1D0LnI5G1Et,FygjYCt8FBOnqiqg6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1448142.734405	CEVi7z4WjDdx3tm1gg	192.168.1.122	55491	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FV2FjS1VmDQvUYiHjd,FxRHbW1PzbzMzqqPX2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1448411.518804	ChfIBY1zZi0Ur8pI2b	192.168.1.122	55493	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FtLMoH3Yu17BCqjSxc	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1448575.602096	CSXqc327HcnJ46kZN2	192.168.1.122	55494	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWpS4z2sDtC5SU7NC9	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1448728.926983	CGMCg64OYRLqmqP545	192.168.1.122	55495	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIlmF52VLk6wQJ7N6k,Fj3WAV1e2vvAO2QLld	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1449347.597103	CnOzYD4hXxzxy2ev9l	192.168.1.122	55496	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fbvoi745IdBV2fHrx6,FCQXAs208aGcpMVo01	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1449637.415995	CjdAr61Gh5YFSlq94b	192.168.1.122	55498	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FOA4EM3fqkcLpwpIm	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1449790.539223	CVKQXJ2821vTKzhTy	192.168.1.122	55499	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDZZKj1Cw1QjOX8uSb	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1449919.859671	CPPT7O3p9WiaLJweTj	192.168.1.122	55500	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFj5IcIKevwVcqAul,FwC1NV2nZgAbQ5JHQi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1450487.544960	CnqQhJ3jhjhPeJEJfc	192.168.1.122	55501	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQKBMv1HQUcziW7Ja9,FNZspwxbAyTAo5mqe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1450830.312452	CDzGhy3MAmjMUyKqp	192.168.1.122	55503	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FssllN3Km5lbQuUJcd	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1450966.380380	CJImUh4IkhXY790UA1	192.168.1.122	55504	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FkLgCd2g7FMoRotQph	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1451092.705718	C5MsSD1DRcEIQwhu5b	192.168.1.122	55505	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fvd6WzjF5IxT9S75l,FIRXpbV4TiqmqTYX	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1451744.380117	CpUMs210KZW451FBNj	192.168.1.122	55506	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5tG5D4y14QLi8fFK,Fj6vPj1JcrZ5kwTErb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1452068.154492	CRaOrb4meNnKsZyre	192.168.1.122	55508	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDqRzR1E0ppyPqhB6b	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1452236.236151	CECEfl3fm60viqxscf	192.168.1.122	55509	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FemawQpZ1pkj2Nxp4	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1452388.568874	CEhTcJRkOHDlV8N0b	192.168.1.122	55510	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNP3oW1VUb3eAyLR76,F4d0FO3YicfKSBd93	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1452977.235320	C1dlA32ejwUk1DO2Ja	192.168.1.122	55511	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdI7XZfmnMUGMN44b,F8Y6RV1l0b9yjClwM	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1453313.714917	CzYdmK2RSRfXUX5Bzb	192.168.1.122	55513	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FURd0D1UEIA7FhItn3	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1453480.774463	C3myDB1B6Ebx0GP8Uk	192.168.1.122	55514	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FO1UC64rjz8tn00hMe	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1453613.109208	C7Psdo1UPsyfvb1Fk2	192.168.1.122	55515	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzSz8f1w8cfcdJCRwj,FUkfr71Vt6nt9kynt1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1453958.276190	CBJZ6zH5TfHO21mM5	192.168.1.122	55516	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQTyaD1c8aoZUO1XV3,Fk4NFx2MW4gawC8aQ5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1454208.736911	CLEqQbxGPFKscTEMl	192.168.1.122	55518	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5YjCG4X88y2X9XmAj	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1454359.788548	CJYJvh1z6Wnobvace	192.168.1.122	55519	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSgMY12KvNgs8mYyYe	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1454535.115024	CR5Yg63KkA13MvSna1	192.168.1.122	55520	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbjgQF2Cso5Nt4GOmg,FTUbay3L9SQRQOw14l	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1455127.807136	CrqTXx444YgumYUb2k	192.168.1.122	55521	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F65W4F2Q3101cYTVhe,Fl0gK72S5BRILv3Zi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1455420.280782	CAxsfTM8oZGsvI5e4	192.168.1.122	55523	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6IaJd1Q9NJ7l1Spda	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1455587.353614	C4IatB1bfgGeXnxi96	192.168.1.122	55524	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrwWLa3oVA9AyF4Dc	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1455718.696681	Cgya1dYf7Odv4uwZb	192.168.1.122	55525	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FH3LzB3Xt0wgOd5lpf,FNNV3m3UCXnqtAVpz	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1456303.377412	C9rDxu3AvBomBblM2	192.168.1.122	55526	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3zCHwljfVDxv2HK8,FmiGvR2khDFqb2HOn4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1456615.132574	CsKZHo1O0A9EWG4hfh	192.168.1.122	55528	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVSxYvBT2Dg1fih4g	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1456760.199777	Cp2r542ImhquHm5Igd	192.168.1.122	55529	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKjJD43tfyap4xMMac	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1456883.521661	C3GiNe2WlcIbfiEGf	192.168.1.122	55530	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzABCX2Y6ert3WvEqd,FGHF244yaYIS462iTk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1457539.194247	CfbafSkF7k0LCXQsg	192.168.1.122	55531	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXuSO028pWSVyxz4Ij,FygsGE1Ual4WGGAYk7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1457849.991889	CsSlspxCPEtN6PQPh	192.168.1.122	55533	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fk81hT1o4Gjix9VDt9	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1457993.082466	Ct0Wkn23LU7VSM3kCb	192.168.1.122	55534	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FeEC4y1KfyObnf2654	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1458131.415689	CNJBSv30KUZhdN4eR1	192.168.1.122	55535	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtvCwKkXYAmh1VlH4,FQkgVJnZRYWD3CTD6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1458471.874973	CzcPSS1xlZjDzznCP3	192.168.1.122	55536	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FP6VL8OT3KcHQS6Y5,Fr3R6PQKLxlxQ8z52	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1458765.655969	C0VVHS2tXsg2HDgfh4	192.168.1.122	55538	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWtLeu1cmor6Ef90eb	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1458910.751883	CMweI52n27hY9gbRQc	192.168.1.122	55539	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FeTs7g4EkhGx6UzLH9	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1459056.075337	CqyaGt2Pcck9KQgnTj	192.168.1.122	55540	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEmFqh49yYU3Rc8Lwc,FSWzTptcRS5hKgNyc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1459705.749488	CtqXEt2MHrXEEKeap5	192.168.1.122	55541	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3uqeF3LT6X3VLez4j,FTF1zF191ArhjcUp86	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1459997.530310	CBDngA1YZXYGLF1bK2	192.168.1.122	55543	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FP4Old31g6G0IETIK2	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1460127.621624	CMjaxCiMlA7xAfryf	192.168.1.122	55544	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1VYcD4xQfltNYkOia	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1460265.013000	CvD1gwSZ3uUwO2TRe	192.168.1.122	55545	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FH0qux4ZaDGvuQieoc,FAZT4l3zE3Oq1zuXK9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1460837.686765	CP46Fw1AGxjCBWcVV5	192.168.1.122	55546	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLARCEeHASWXC1BBc,FnzMWP2DG2FkRkvxB	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1461136.428342	C1WeQ74rJfzDOdV8a8	192.168.1.122	55548	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlhSrBlfrLiLncgl3	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1461311.473958	C6geqm15fSwWWkvBQi	192.168.1.122	55549	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJnTGe29mMOXYZQn13	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1461486.799845	CkN20L5hWXpw09zvk	192.168.1.122	55550	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkIlZk3MewOWaj6A6,F3LPDN121z1PH1jes8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1461815.272477	CULUX22F7Rdpi4WnFc	192.168.1.122	55551	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpSzlK3fIIT83zw4n7,Fc6PpI1wdLqW4ieez6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1462110.756002	Cyck7rofaVmYOnfge	192.168.1.122	55553	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Ft0yVw37gC2LfUtCB2	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1462268.860232	Cs5H6N2EyNfnISjRye	192.168.1.122	55554	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKQhwHbmCHQPtbYvf	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1462416.186167	CgJKTs2YZ9zJdEovK3	192.168.1.122	55555	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fy5TM5eXzZUwVVhn6,FUoEhX2FqfrZJIhwzj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1462774.360118	Ci9ixdFeMWIt9UxP7	192.168.1.122	55556	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbmH0PnSOoWxfuHJa,FAGUSf19kbqp9klP6f	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1463084.134834	CUoCVAWRNdD9rCa5b	192.168.1.122	55558	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFj6qF4UUHiYdqZNQh	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1463237.202610	CDqNPZ2Vx5TMUlx8df	192.168.1.122	55559	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcKPc516K8cyaxT1Og	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1463372.532463	CKn0Hk3mcOdcSrzEMh	192.168.1.122	55560	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4sOsF3P1hptLSI2s,FNzzaM32uam7JgaOXg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1464030.206761	C9QoEFp69haI1XPe7	192.168.1.122	55561	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FD2zwh1HCqy5jVjMG7,FZJ85o4MdN20fdag5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1464357.002607	CEWG7H2MaZbLiLf7yi	192.168.1.122	55563	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FelcPQA20bRx9Q2ji	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1464517.102714	CSFRRQ3fa2z6npT4B7	192.168.1.122	55564	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhjSMtVwyPLtahTee	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1464637.429027	CAyIDXI9wpJgvxWg1	192.168.1.122	55565	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHRyiD4KzMoJawqeA5,FQNcEP20jGYRUAJA8a	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1464993.603532	Cj7dtf36M1riD3k738	192.168.1.122	55566	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPIqm82GjLeqDrVkQe,FcL0Bv3DTC08w6NUjh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1465340.062223	CBcs5s2JR4O4RZ4Lja	192.168.1.122	55568	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fe3p0L15JQ6wmqKxnk	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1465484.142860	CL7pf03wWWjUMp7IB8	192.168.1.122	55569	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKMDvk29ih1rDaqdJk	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1465662.473645	CvWGe3J6gEoIASXbd	192.168.1.122	55570	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoyQpLNWco97kkydf,FZO9NvfzfpyKiFYB3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1465992.638275	CxIJQ53TdKyW2WwLQ5	192.168.1.122	55571	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEJRzf1qGUDAd245X,Fbh9Sf4JU7l9TXNUR7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1466282.406529	CmOBhN3VRwrHyPSxfj	192.168.1.122	55573	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4H9HW2lPa0z73NNni	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1466428.480228	CLNMDu2UBLNvjLaFy9	192.168.1.122	55574	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlwS2I3dmAWsTyIBWc	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1466573.803657	COZq7o1UvkkDfLTtp2	192.168.1.122	55575	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUvprI3DIkQdLUtmbb,F1vzDZ116ap29bpH5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1467224.479411	CL3gqVOZmVQyxc9s1	192.168.1.122	55576	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHv6Cb1kA3o16grcJl,FPvDAOpmFndx1hr0f	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1467544.950107	CFj9Iq17G6UnTpfPug	192.168.1.122	55578	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fbt3Tn3CYjTOVKYO78	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1467725.015921	CtF9rF46krXUMcbS4e	192.168.1.122	55579	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgpDXF3PddYuPiXL6d	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1467872.339783	CFRsPZ3eMI8SSM4wx7	192.168.1.122	55580	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYzB9rKzXv9lZ0yzj,Fbko4E28x6ZdV2y7Sf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1468512.020688	CvGTyG3APDbMpCEtC3	192.168.1.122	55581	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeAR2tvaGETHgpZ1i,FIe4Tc3l2t6HEtwZzh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1468833.797411	CxVrQu1v0VBxpiyWA4	192.168.1.122	55583	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwxBAd1q2AJ1Jzrg7l	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1469004.844804	CfrhUr1DFniaMvV83d	192.168.1.122	55584	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrAzzt2uc2NjX1Jhf8	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1469127.178561	C1R9T23AEtTxKeeOj1	192.168.1.122	55585	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5kEu61pMavAtdsuv9,FIbANC49WQP3Dj6h3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1469465.352731	CVO3Gv2CKNnkdU5Qf	192.168.1.122	55586	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuoJ3X2uXtCS9uMShc,F17nFhKZEBjkPFcKg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1469746.798466	C0LdMO2Iun4YZgGx4j	192.168.1.122	55588	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZBdPg11CzzLouIyQe	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1469902.836095	CHEISb2qxhIMj0AmCi	192.168.1.122	55589	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0Lhng1BkEFYHIxgkf	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1470052.165062	Ccrm4V2rmtuyvSB8b1	192.168.1.122	55590	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fdz9UI2mihcaUect02,FX4l6eFjD9L2isvI1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1470301.333329	CSRQUW3PMrpGH8fLgd	192.168.1.122	55591	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxsmoE3SsGwAYBfPZ8,FEDPhN1tXiWrNkuV97	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1470605.086316	CzZQ4m3a0zpPvv2ly3	192.168.1.122	55593	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6PZjL1kNxepAflBJ6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1470744.146586	CXEWJn4TfUvJi0kEvj	192.168.1.122	55594	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F10lAm44bqovwyZNNj	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1470902.478179	Csn4Fy4Fm5RuasU5J5	192.168.1.122	55595	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLHcvk37p1OfdHAA18,FTGcrX3HzoZdDaCMG6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1471515.158850	CUO2cI3lM1zEwSndZ9	192.168.1.122	55596	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkfZD53Gzyier7k8jc,FITIxy2KpRoTxdIfTg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1471790.962121	CgKCVw3g3AbGUHl5fg	192.168.1.122	55598	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHfBHZkVk2FmfJp7	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1471942.077972	Cnb1hVKUAGQqpshP4	192.168.1.122	55599	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOvG0x1FXnEBxeC3h6	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1472095.402810	Cn73h84eu9Fgyw5H3h	192.168.1.122	55600	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCh5Fs4qLGyUtIUdJk,FjK5RV2WM4retj2xqh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1472703.066499	CMvRpuNgWLXGQFyHk	192.168.1.122	55601	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaiApz3JwQvsJFTDmh,FSHqZw4UoSbEgvAbs4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1473013.850420	CndrcX3XSieM6x4gbk	192.168.1.122	55603	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFJnPC3qUmnleGPeCb	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1473158.937426	C2emXy3Ow98c0NjJFl	192.168.1.122	55604	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0EjKX2JZf55ApJJMl	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1473335.265613	CLHXRx2x4kYkj13bS8	192.168.1.122	55605	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcthN3187cyn7ZiHvc,FWw2Ff2ZOBhcBfUyT9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1473933.936302	CZUt9GTQ1JgC9Y0T2	192.168.1.122	55606	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpVzryFUHljxnZ62f,FeTlLQUjMBrwoXwN1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1474254.422463	CWgsrX3ddxiCC2CcOh	192.168.1.122	55608	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FexqVV3WYl97LMUzu5	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1474385.511137	Cy2Jf53dcX07wIEsDf	192.168.1.122	55609	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwFNpz1g5KyFaP9s7d	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1474514.841583	CLDSFW3zD7m0b0u4G7	192.168.1.122	55610	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4EKDU93VpeF2wnVj,F4xUqw152l8TzNoi35	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1475063.510316	CWWT5r1CJsJpK8UHO8	192.168.1.122	55611	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnwRBk3sDRnf3TNSkc,FOKXTh2YUZatzGr1A9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1475365.982567	CbrRPXw9eY2Z62jYg	192.168.1.122	55613	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRzk1n3Ncg1sv4ZBXa	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1475501.035041	Cav8cG12nfbwJ94I73	192.168.1.122	55614	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fr513mGtoDoBciXGb	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1475624.367191	CFi3cB2Q8awc1Wfg7i	192.168.1.122	55615	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHW1R624IjUsWsMmb2,Fi6zfW28Ot7k6poJeb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1475900.543421	CbBFgQ0STtKklQJJ7	192.168.1.122	55616	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRmkEX3224ABRTCIl5,FkNyL92cp5L2PZnBZa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1476210.000299	CVeUOAl1yzmbVg6m8	192.168.1.122	55618	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgUAvut4Dpv1lpAH5	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1476381.090799	Cai5t93DSrM8SoMmq5	192.168.1.122	55619	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2nRjl4ckZY94p4ua5	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1476531.420945	C3l0hP1MstxkrLBgTd	192.168.1.122	55620	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWzeyT2GgrOMYVnIQc,FLjFgNZCNxDkI1OBk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1477129.110125	CLdMMP3Do1bcc6kGTh	192.168.1.122	55621	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLyHrZ22nquLFijFH5,FbCmVg1sID1ITAXJw7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1477450.874850	CwLLPF3nPRKJZUK3f2	192.168.1.122	55623	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FE8kXi4mEQGKksFTy6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1477612.911665	CqCeId4qL4BNPl0tre	192.168.1.122	55624	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F86kUO23yBHRQbX8S	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1477755.230071	CXedGYcVdzIb97eT3	192.168.1.122	55625	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVyeJq14Zu6cdJY01h,FIhhoZ1NrOV2jjQQRa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1478337.908388	CuXUGtowCDgcBC5ah	192.168.1.122	55626	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXEVYe4kZhPQsRiFd2,FdkvsR1iV5czBZir33	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1478667.674576	Ccv9BB4fTuSJwS6e5h	192.168.1.122	55628	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F74iWV2k4e4gvqPrhh	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1478805.806553	CqpSkE2OypqquieKPd	192.168.1.122	55629	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FnDQq74Izvjzperwwc	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1478960.132721	CGta4F2q7XDKChCBKf	192.168.1.122	55630	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Frm7U548BC1PZnDsSe,Fpuair4b4ujE7FXN66	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1479577.810951	CshryE4mrsyks5QPC	192.168.1.122	55631	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FihO0oY3ecNu3YRI,F6nKwbVNXoZi9JWw6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1479889.564465	C9ZP9MFcFVz23J7uj	192.168.1.122	55633	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZllgbTUglTxp1YR6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1480030.620450	CO80Re248AJFceHR68	192.168.1.122	55634	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5cUqC1hUjVvoZ5XLb	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1480170.983775	CER5QK2WtUzkJrxWb	192.168.1.122	55635	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZRPln2fpIlubPZ9L5,FzNR1j1s09hR7xe1a	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1480743.660399	CFY16l44GL58uqnvik	192.168.1.122	55636	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYOOmG1emcjZLV8jNe,FPDXZ81dgpInQ6Yx6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1481347.647266	CUzQJ1HcNLVnwSPhf	192.168.1.122	55638	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FvJUeN3SUKKBM9XZG2	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1481518.764062	CX62nr3CDbJLgAXIFd	192.168.1.122	55639	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FC3c7H2kwz5uZJAUi	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1481688.103585	CnvRQ43R1YRYac2hKe	192.168.1.122	55640	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxjzKq4An8A6sD9xN1,FdAjJg2Aa5XOGxQSod	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1482290.782000	CYdFgD1v5Xi3quo3P5	192.168.1.122	55641	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fr9J8yCajgIgCgm7,FQPsDVeyDyDl6l7N6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1482590.593414	CahxAL1R6DCQvyQZG8	192.168.1.122	55643	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTUfDp5e528OffTe6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1482732.705461	CTQJTg4rWhmmjgRfpd	192.168.1.122	55644	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHWl4Y3FmxtAzqkYUh	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1482899.035861	C6fhwZ1kMJoyEvsW66	192.168.1.122	55645	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdLQ0J3BxqV70wWytb,FXU07cDNBHiQKyZu6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1483529.730704	CCokw13SK7qEScTEkc	192.168.1.122	55646	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8qeI33b4FINfqAN6f,FAC4jk7ZLgaXtdSE4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1483814.530222	CtqZZd1KGwVJfyq1m	192.168.1.122	55648	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F64HuA1xZe8iBxkdr1	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1483949.622311	ChhKWuEB16Wq5ZMR5	192.168.1.122	55649	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6fEHq22onGxNEqwx5	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1484091.971201	CflkqpbNFVXwZCjle	192.168.1.122	55650	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkIrANviCIvLXoVk,FSL09D3b7vEUdaqkjl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1484714.647304	C6x32E1LX7aoTcpSc8	192.168.1.122	55651	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fdu3mpLJpodgnQPE6,FlfBFL18yqiYDe57a6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1485031.426965	CrunfE1VOXYhKDQZp8	192.168.1.122	55653	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FsKe843w9lpCpEi6oc	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1485198.487923	CoMO6FTI3MJxCirld	192.168.1.122	55654	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhdRMKGp4kU6OzQZi	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1485351.832625	CBO8rT2PKegnC5gyD1	192.168.1.122	55655	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqHMqi1g3sRnH6tmhc,FnVwTEynvuiQh5iKl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1485960.508047	CqSx8w2ODrM7GzNOG9	192.168.1.122	55656	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8ZON23xVhOgm9F4J7,FHXac33TFd3WyK8rkh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1486234.338026	CN8vRS3lU8cfQ5sDNc	192.168.1.122	55658	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqCL7s1hG4OdCKB391	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1486386.455854	CQv9X6269eISdpmTm9	192.168.1.122	55659	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FH9sII2eI5j9yWLpb	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1486523.787757	Cq46DP2lWDAj0mIwXh	192.168.1.122	55660	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfJH5o1ewwSTY2yma8,Fxq0Nk2t9klgmxhYWc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1486790.050371	CEhkBX1IOuXWE5uYl3	192.168.1.122	55661	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3vyFJ241COngy4zfk,F7WeQh1LKwH8qwzljb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1487044.517913	CvQv5RbBUYF6cHAJc	192.168.1.122	55663	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FSlfGzaukoh1Qq9ld	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1487168.570650	C9zPdj4ZxwTmA112Pc	192.168.1.122	55664	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FB5Hdg24QlAesqSl77	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1487340.902379	CtnKFVa169mXreN26	192.168.1.122	55665	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9xYiN2Q4DN521hy8b,Fjf5zD1ogRpvgxF1h6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1487921.577782	ChimiF4QrgB5RNhag3	192.168.1.122	55666	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVl0O82SCONoN8Jl0k,F2mCYK3rPA05ZGYTf5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1488204.361425	C5EqHN3ZmKa7JWeU5f	192.168.1.122	55668	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKhwfg38Rz7P9MPpme	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1488341.426530	CyfymZYq3gQ3H7LZj	192.168.1.122	55669	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1DuV12YH2Yl9cQTVk	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1488476.755366	CMtQ1e38F3QUHTmFw8	192.168.1.122	55670	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FChc9f12bvv1zgUQrf,Fb7FqRhSEttlpf0F8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1489099.430030	Cinn9y4RBmHGtv6Ps6	192.168.1.122	55671	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5jgQz2CWxfwUhw13j,FPbIhHAqCdyF7XyPg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1489432.190825	CvU36F38rM6EkWx4y3	192.168.1.122	55673	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FahwDr3GNarH4tSmVf	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1489583.272149	C0025V2bIETKtTZCB4	192.168.1.122	55674	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRdbcj3gC03ynZAjwa	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1489706.603629	CVsTTCsVrPRksCIRl	192.168.1.122	55675	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fu9JYd2zRUGNt3Bnl,FhQtjhFdbiqfH2iw8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1490351.290843	CAwLWp2i8HXi0vg1Pa	192.168.1.122	55676	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4vzLC11FnPgEhz7d4,FGPdnlKB7ziud6hqe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1490635.079528	C0a21Q3wIP0bpdRFfj	192.168.1.122	55678	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FfQ8CS2gJn1T16u03b	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1490773.186997	C4KJLn8j4gSjdKV72	192.168.1.122	55679	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZglU024Q34zK6MAje	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1490952.525226	C7pgxl4EH73EXdfyoa	192.168.1.122	55680	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7vnAj350IWlHsAQoi,F7pjvN2PTJ1DBEhc04	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1491573.187408	Ctp6Ek1Vbh7xfPXxxe	192.168.1.122	55681	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXkFpd348RyidhPt4e,Fc0OA64r7BT6poro1f	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1491854.691403	CL4cVq46bPzKACQiF9	192.168.1.122	55683	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNYNtF3H0fWuOPWNS6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1491992.786405	CA6DGP2BnHTrBULR6e	192.168.1.122	55684	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfXvMQ20MopavkiJFg	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1492161.112876	CcYC894p8q72hhOmi1	192.168.1.122	55685	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfQrGE1CEUef08rfEh,FW7Bc748xGdJUCF49j	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1492701.780067	CN2JRQ3iYecZTpGag	192.168.1.122	55686	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDlVqOVEafASyb6Tl,FEif1j38UgKEZGGfHa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1493023.292149	CpVidW1Q6raKgIkxGl	192.168.1.122	55688	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6U5NB47ZZdqznifWg	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1493176.418247	CsZkkaVcQXz2d5z6d	192.168.1.122	55689	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4vmEU3yeySyaKqQd	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1493308.773109	C6020Y1JtuHvuWb5sb	192.168.1.122	55690	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgpvoI1DGTbsTJKmcl,Fqnc2l1giYOhJhsFz4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1493915.434219	CHsQSz1JpeCHQhDCfc	192.168.1.122	55691	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FT3Ile2PnlEICp4sXh,FEthU3Mcku60XKabl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1494183.906245	ChrP481xg34lwEN7X	192.168.1.122	55693	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fh7ucY1yz6KmYNpxF	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1494361.001446	CayIqg2E6To2MtC2V7	192.168.1.122	55694	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8MmKX35m1NAEhuL6d	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1494502.328878	C6tTMv2160rhpYx5a6	192.168.1.122	55695	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsO04HsVUZgK8Ksdh,FiRPx2K1PE0d8Hd43	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1494771.495745	Ckd0sX3mVoPHj5fJB8	192.168.1.122	55696	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Flvdln2M3BaA1oMzGl,FMOaK418XTicHkAZ2f	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1495113.968486	CFM5EU29cyDgHIkVHg	192.168.1.122	55698	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F52a6P2bGaMnOYFEuj	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1495267.055067	CmulEN1bpwHYRKHl5a	192.168.1.122	55699	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8LyJBTmYqbD8KnXd	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1495427.379360	CdU1MX5iRYzPtJ8we	192.168.1.122	55700	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FASGc43btSmOwQKlQh,FqU70V2IYkGEvHXtxj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1496001.053706	CUOuZ443pWVODG3GS4	192.168.1.122	55701	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJcEWa3qKHXIzn98jd,FTFQdD10eUNyqOPiKi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1496272.827875	CVvXjH3OSH8v1gQTx1	192.168.1.122	55703	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FngjdJ17wOWQ7mEV42	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1496425.910115	C1tVXt4xJyrjZ6vEOa	192.168.1.122	55704	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPV0FD1Eb8WUbH2TRc	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1496546.237394	ClelCO1aCrOnMLtlWj	192.168.1.122	55705	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoIIHjpjUNIJjsqc9,FAsxH810hwHZ3PUgEd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1497121.916376	C5ZGEX1GB0DOtWHoT1	192.168.1.122	55706	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FC2HhS3GXOrMfxBbN9,FBglxt2GRI6jKWkisa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1497464.379410	CtdBO93DomEJO9n0x9	192.168.1.122	55708	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrdLkP2z9BjpQ0nFs8	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1497643.420909	CLWdbn3ppkf8vm5Mg	192.168.1.122	55709	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FbehfL1uqERxahkat8	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1497793.751258	ClPABd1ihqEUis60hd	192.168.1.122	55710	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGvL0q4TNSPzMDLWK,FVC58v164fsDkhJPWg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1498402.426647	CR4Ugr4krp7JtY5AYf	192.168.1.122	55711	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4HCCJ29XqxxVSc4wh,FgN27uNDXz9mvWvD2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1498719.223835	CqRerj1HGZnBzrQa52	192.168.1.122	55713	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FovX3A1xkSTDyMMYfd	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1498874.311026	CmIGld3EPnA2fKCT29	192.168.1.122	55714	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FeaBNb22AaD0jWYns8	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1499034.710685	C6qCwnEJqZmQ91JS1	192.168.1.122	55715	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7jWSzAtbxnRDL697,FzWH7u3VjvF4rGbS5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1499613.419412	Cm6LGd1AAwnItcivC2	192.168.1.122	55716	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxJPGWdXhp7JK1vQ7,FsE6Xo3ubdGaJBWubi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1499883.915789	CZQaSdtFwsGGD9a13	192.168.1.122	55718	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fdumbo2uQcC9NJn5Xf	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1500062.981684	CpW47N14UfRuh7v5vc	192.168.1.122	55719	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfH7N64z2qAPfwpnDi	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1500230.305310	CTr61s2YiRbUKVSPve	192.168.1.122	55720	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfUewt2plsX92vZXEb,FFuSEI35O7f9fYl1ch	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1500859.980232	CSxZ3D3UaXNuCby0pd	192.168.1.122	55721	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNwFMn4qkrjqhhN6b5,F8LqmT1Ftx9NWw2NEg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1501144.745002	CJ67dj3mcQwGgujfy9	192.168.1.122	55723	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F45AKZ1ftRXcNx6m7c	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1501282.813546	C6WysB37ePWTGtApXd	192.168.1.122	55724	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4ZSmt64fNaQqtWB5	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1501422.148276	CTvYG94SrgRzYMQyeg	192.168.1.122	55725	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fxdgy82LsonlayBmXg,FsgP3a1fx5HF9pi7Xl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1502052.825118	CCz1744uV9U4NuVUP5	192.168.1.122	55726	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5Fdk54RfZeCi3hvLe,FedV2I1e6S04xdNIil	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1502353.604226	CErsHd2tZDungnKEbb	192.168.1.122	55728	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFTlIJ2FXsvuOvMNui	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1502530.677329	CgdGZ44eFjF9WPYwUl	192.168.1.122	55729	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJpNmF2qd5scUtO0Fi	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1502666.006510	CKTf3b2UNOj6YJahGj	192.168.1.122	55730	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FduLdwfQYWSOY3JX4,Fccltv11nMM6FsI3Y1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1502973.178025	CGiPlH3kwWojAtooW1	192.168.1.122	55731	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWbapw1PSozIEJxrw2,FuWaaT71D48rBMPV2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1503271.981478	CRGMnt1Ske3OMcimOj	192.168.1.122	55733	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKhsBkSDo2jOemrVj	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1503402.110980	CCL9gQ1xqfTRoG1QU8	192.168.1.122	55734	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9CdNB3RPSIBTc2eNe	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1503566.431116	C4SSWEZdSYIP17Xpj	192.168.1.122	55735	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fs4Qd449rNsyrVn1yf,FeZUgb3E1ky9QHMHBb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1504172.102360	Cj28hl1GlUGt5L7pBa	192.168.1.122	55736	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuMNjn29coKdOvNjAa,FSbXUz49ys8Q5FMIv6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1504498.587779	CIATmN1PSwxeeNYmfd	192.168.1.122	55738	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FaMxdGRd6jIcfg1p7	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1504636.675954	CFWWwJV6iJJ8yJYc3	192.168.1.122	55739	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwnRCU2PwtqXgK2rW6	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1504762.010140	C39kMt4xsOdZstDWS8	192.168.1.122	55740	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FY6Tkk1hq0l4GMJjm1,F1ClHCT7lyA5HnARg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1505357.676478	CjNIvt4gLWgXI1tYY9	192.168.1.122	55741	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FARbPQ2G55kYk9PQge,Fc996V1an59URIlVW5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1505665.148573	CWQGHi3UsBgDBug2ch	192.168.1.122	55743	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQ7LwL1zS1j9DLiDx5	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1505826.205767	Cdh6iEQQRsUHB8cTg	192.168.1.122	55744	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcBooC1mPLd4sLFosb	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1505963.537508	CBO1KH2VdAsKtefkv1	192.168.1.122	55745	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaloIU3wDmQ7Hl1yEg,FE4GQySRDm6P1Emi8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1506208.009019	COHvQ33HzfuY3aR5Fb	192.168.1.122	55746	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzEFSe1R8rO1ChpaJd,FDa9Bb4urxMRQw1eJe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1506488.851998	CWE8AS18BB8WfM9QZe	192.168.1.122	55748	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3jwD72T5RcTFWosxb	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1506668.040225	CeTaEkBsR3C8ndAM1	192.168.1.122	55749	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIX0aq3MtiEfcYadG7	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1506841.399900	CFMsNH2cdFzXTbDeec	192.168.1.122	55750	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAGBAj4LQQeYZJeiJd,FUe4ff4qZuwK9TCgid	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1507488.079871	CV4BXp1TzQlspaBbij	192.168.1.122	55751	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuO0cf26e8RYRfjtp,FRxyPm2jVMToD7Onf6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1507757.549255	Chuzz21zqsaxwaZV84	192.168.1.122	55753	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpgK593s40YWbOzetf	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1507897.634728	CySeCt2iI9XHBnLeDg	192.168.1.122	55754	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmdXPA1ZT0Hh5u5XXg	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1508031.961694	CoJAxJ1G9lmYMpQek5	192.168.1.122	55755	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJmqVe4Gxsjn0EWtK2,FVJ0Woa6ysva4aQPe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1508673.634484	CSYPNhHmYhOd0aWz9	192.168.1.122	55756	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMaUXg2XGJHIYnkqd5,F0BnCJ20ouz9eUSQo9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1508994.420650	CJW0QcgiovUDHkRTc	192.168.1.122	55758	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FOUmz31cdL2cEz1Fkd	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1509150.496198	Cv5TmTf0fso5NPKH3	192.168.1.122	55759	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fiwu0l2hK76DO8OyMi	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1509304.821684	CE7FQ51rhuJgTUds3l	192.168.1.122	55760	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F75Cwa3RGTmtBxdIob,FkooCk1x7fvFgscBBj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1509938.492942	CkBpupVRtcdbkySc8	192.168.1.122	55761	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBrH5v4JkrvZaK5kYj,Ffcwmg4L94ZcRKEXi2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1510264.256556	CMPHvrVOv4IRIa2	192.168.1.122	55763	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2iMri3l9nsqu3Mkv1	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1510428.332535	CPvn2J2N2V5IJQL2i4	192.168.1.122	55764	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBr7wd3z8KLOljyNld	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1510564.252563	C8Wuzg2iWVQW9l6ST6	192.168.1.122	55765	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqcLdG3Y7Iv1Sd73Jl,FHSJ0P1qI71YlDCka8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1510861.419461	C8muI62NYoAEaZgWT7	192.168.1.122	55766	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkLNGw31ehV3fUljoa,FuiioPpQyIBwe75bi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1511156.187090	CjikD7hY2JmfdFovi	192.168.1.122	55768	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fbc0Jp3Ail0cWBC5Lc	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1511310.240605	COF3d7FwFFY1xPbC4	192.168.1.122	55769	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtxVCt3LHu9GCEUOgd	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1511471.567522	CWIV0N3yEIMFtDo1ij	192.168.1.122	55770	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBs06j2MOt9pBb1bOi,FiL5kH3ALMhoXA2mBa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1512013.235730	C2LGWd26sw6mUVKxPb	192.168.1.122	55771	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNggto3YJwcMETvSDk,FmDCRYWOTVwqlnftj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1512325.712259	CSSeg13xUCG9eJ2t9b	192.168.1.122	55773	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FU9U5P2fdTiqyFtpQh	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1512491.789192	CN8wq04IR8CC6ELYN2	192.168.1.122	55774	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FTO7R32loNmIVsdDve	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1512662.118960	CFBNfT1Oo1NJhcIn54	192.168.1.122	55775	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2UeEt2bfj6fSTaqo8,Ff7enk4T7n7tFOW32	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1513321.797183	CK3Lnd2ZLQMIoBQXNj	192.168.1.122	55776	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9h45s36SVMdgULFpl,FGF7sn3YmhSHaKAge	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1513633.590236	CCbOX025ePhi8AGzm	192.168.1.122	55778	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fz2J481iYNekFEXkU2	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1513805.678402	CDoJQ21TExGomWPpxg	192.168.1.122	55779	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FY7qJc2KEjdwVXcoVa	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1513967.004799	CPj2Xa3HJGpB4L0pre	192.168.1.122	55780	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfPorI1c1UjEmtKvj3,F9W2Ks2qNOiusb2xGg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1514557.684216	CwNlBZgAfvjEzPcNi	192.168.1.122	55781	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKxic34iXzPtKvbCWa,FpmDSw2qq5jrMGY8qa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1514854.162946	CnjvOx3w6XoH7MXmK1	192.168.1.122	55783	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKeqFD1F3AvzWN0kWc	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1514978.234741	CvmzkL1IToNzX20s78	192.168.1.122	55784	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXPsCA3nwdI97t9BP2	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1515113.563461	Cnvc5KoKedGgf6r2a	192.168.1.122	55785	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FG8d5O1e1GD9v57F6e,F0f0le11ZQkmZbxxje	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1515758.240418	CML0tj3vhJlY2vDohf	192.168.1.122	55786	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FV82NgT02BKMXmbPf,FHlmkEfzXlR9huvQa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1516060.019662	CYOVInksURNpELJcg	192.168.1.122	55788	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FyDKHJ3GmWi51GnNKk	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1516192.109781	CfbapN3i1ec0kFzMSj	192.168.1.122	55789	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRlvfqMLkSeQSXkda	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1516330.442320	CLAc091lLzPqAv18Tc	192.168.1.122	55790	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAJbzw4zrPOUk20pKc,FWIeE749jpJh0OijS1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1516941.110910	CVE7cL28YOC26YVb06	192.168.1.122	55791	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fvylix1lyMtNFFvFTi,FWuZmU1MIG37Dx2Zal	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1517244.600383	CR7JGN2puUsEMVZgvl	192.168.1.122	55793	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FasnzxkpNWqkEOPRl	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1517401.709909	CLk9vq3nTf8AZ3fa1k	192.168.1.122	55794	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3oCRj1lbi64ff4yXf	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1517573.039514	CdXczrjkHCJs4fiUa	192.168.1.122	55795	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXjsSi3dSWzM6t9MNd,F59APn3NUbW1B3PT7k	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1518129.720005	CJccNVnUwSqGtMBuj	192.168.1.122	55796	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FA7mgzHU8ItDup8D5,Fg5Cdt3wIjjWuPS8Oc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1518431.519994	CRmcLi4CL13LIddMl	192.168.1.122	55798	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAtYWm1Qolj5qAgu3l	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1518556.629922	CvxeZC1oPUwoRm9lu4	192.168.1.122	55799	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FudPeD37RkeTvtNaC	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1518688.963855	CiWb9t3L0Zb0ewGPB6	192.168.1.122	55800	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtAe6S1S2Otnh50Qp9,FaJv893pYsVP0arsFa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1519331.637963	C5slvW2mgYzmvzNsOg	192.168.1.122	55801	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBRKNKfvmx7EwxTxk,FCxI3o2l5JNZFyl6vk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1519642.436774	CacRqD3pIMFzc9gl7k	192.168.1.122	55803	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1ahMOsWZoK3B0Oj9	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1519808.549735	CM0Dfb3tSybujFVzF4	192.168.1.122	55804	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXBktwNqNKhSqsNe	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1519955.875365	CzShDs2ZOf8CvtBNy6	192.168.1.122	55805	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fa6cWs2lnbtVegPjzc,F35jQu2XUS6ONxu8Oa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1520571.550804	CksaQv308XPr54Tta4	192.168.1.122	55806	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0GXO91PbcycDrMDg6,FDS7jIp8evKMyZ4c	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1520869.335128	CjR2GD2AWZHZAEZIEk	192.168.1.122	55808	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fetl9I1jAwOW2k6Zc	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1521000.402947	CS0Q9pnUIfUkjdMzc	192.168.1.122	55809	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4X8Zn4HY5WC97kIzj	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1521135.731923	C6u8zB4s8SwBBh5VYi	192.168.1.122	55810	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FylVcT3tgQWGBHffKf,FiODxS0vChG2ejrPe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1521742.394100	CUAlOp3fnbC4tWcdH3	192.168.1.122	55811	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0pZSh1HkJNe8wtEEk,F0kY673PBr9Nw8vJt8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1521995.884643	CpFc211ECpnEs5ULI	192.168.1.122	55813	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqzueK3aRggFb6l4U	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1522175.964449	CsEDLh4WzLPQETEQ5h	192.168.1.122	55814	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4Zlt33L2EUaZNYMM9	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1522343.286877	CEVWg91xCZYW7BVPzg	192.168.1.122	55815	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoxKZb311qUJsaPkq8,F9AF9o1hwkmoBW1ppa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1522896.974501	C4Qj6R1JJNvIq7pQFe	192.168.1.122	55816	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fh3yao3t7wYLP3yaR9,FRFZKq2Vh27beron3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1523206.766696	CUsO1B3JFAFlXJ78f6	192.168.1.122	55818	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBJ2ck4I5Lhce2hyr7	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1523380.886243	CbteeF2OXKIE8b3dv1	192.168.1.122	55819	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlfpMW1ZC7ozgCSVCd	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1523501.223008	CXnKtv0VrOZzC2NM6	192.168.1.122	55820	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fnl4X14ujHkO5mxdMk,FaiPoN2bxwk337MBA3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1523753.385524	CkDcA47w9amRSUeO7	192.168.1.122	55821	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNMtt62msApUf5VMe4,FVqoY51C3xiSaIVFq8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1524038.166767	CRaEQu36wq1yQeoafe	192.168.1.122	55823	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNFYkv3jPAlgqE2Iid	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1524172.474511	CuwDUZQdMaXeobGa	192.168.1.122	55824	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FjFO752OeWflxXaPdf	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1524298.038822	CI0fDa404jiipaeO4	192.168.1.122	55825	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBCmk04NnjpFB2gC87,FAJfIs1qF8tKNTwzO4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1524866.716304	CvFwiO2C8qP32FVvqf	192.168.1.122	55826	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSs2Fm1IrLKohsQzNi,FCHghq3TkCFcQ6bX8b	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1525204.521475	C1qLUw3imQNuPpYhx7	192.168.1.122	55828	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1b0ld4qLEqhDdsSP8	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1525341.634396	CsMdkU2vmwXcsOkfBb	192.168.1.122	55829	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDHT4D3MNASIeVE3e4	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1525477.965082	C2Pwdn2eIKLyHYRcR5	192.168.1.122	55830	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5Egoj1EgDofSxUFs4,FMpPuozt9EXpFH37	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1526129.632655	CQgecK30FeGkovO6p8	192.168.1.122	55831	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fyhw4j43xbKwcXRm45,Ffo78Q1knPwifhhngg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1526411.398751	CFnb6345CrxHTL5jq7	192.168.1.122	55833	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F79Yfg1Pw6dwfGd6Mb	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1526579.464466	CKPowh1AOOiqw0yGp1	192.168.1.122	55834	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FEabqjOf8f954HJn7	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1526749.803559	CVTX9r2K4FRv6F5Jbi	192.168.1.122	55835	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzKKEl1ZCH3Z4omcc,FyE9qc11bwNtguSg6c	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1527383.485040	CljxLT1fxYO8y9YsI7	192.168.1.122	55836	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvRcLb4kdJhuA1FSA,FP3hJF3XPT2QTmYSH2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1527688.245614	CibCiD4UcKLKHas9hk	192.168.1.122	55838	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8OLGJuOYSoIyaGE	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1527860.316100	CrecvA1qBSmM2Iw7Di	192.168.1.122	55839	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FjaqCjpgjfDbXLI62	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1528007.642546	CYFAt529GCNaxAYZ2b	192.168.1.122	55840	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCsTCC1VcczhWceQEc,FJWsEw3SRLFdEj4IVg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1528251.812940	ClCcvl1XHZ7EwVenQh	192.168.1.122	55841	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvAt2H1qjgmb3yiwO1,FmQXSa4KgzwGClG6kl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1528530.558523	CI1xV14kq42nEyOs6l	192.168.1.122	55843	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKPnv74eaEuCq2oVzl	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1528668.618202	CLECga4CM2ezZsnQO3	192.168.1.122	55844	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxNBNo2UA7iKmCxMV8	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1528792.019826	Cb21l3344EqjjSss6b	192.168.1.122	55845	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fb8Jsy2lS7pVr893yc,Fbl72H3QDnI0Ibj7N8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1529381.697635	CKWrLRvIm1lQICene	192.168.1.122	55846	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaaPRR5PueaBLcrRe,F9DUgZBxU6EFjuXDa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1529711.442713	C00zY132o7BfmHKBed	192.168.1.122	55848	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FstNjz1NT9kGREXCqa	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1529836.517729	CjVlq5409xOFpieJba	192.168.1.122	55849	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhQ1Mg2apLF2khV5R8	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1530006.856901	CGrGX4jOa28MiDaY	192.168.1.122	55850	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbrToy1LjpvU49QEld,FkR69c2HRWYiSdBInc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1530580.521375	CAtumo3IakchvqLP4l	192.168.1.122	55851	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1R3WE10k7H4PEIct7,FfbK1C3q0SgpbvcjBj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1530864.306504	Cb4C8T3g37J4ysCC0h	192.168.1.122	55853	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4NSTw1VAeKJdVDov8	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1531001.392408	CQspSX3Q7ZLopTsLp2	192.168.1.122	55854	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FTN3P93C49vfllK3Ik	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1531148.718556	C0VdDu2prC584yXvwh	192.168.1.122	55855	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtuIIH3GYq5diExxPc,FM1ImT3IbdG8RaJSa4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1531736.393912	CaFGGB12PGWJka0qra	192.168.1.122	55856	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUUeF42TAehLn0vcX9,FcOlN81IWCyDzdkXo6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1532059.166276	CQ0U4bixDqh8P4db	192.168.1.122	55858	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAw4J4e4JoOwVMYVe	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1532234.245141	CkLEn5i7GVs2Svexi	192.168.1.122	55859	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FihGUT3Y3xujPeVnG3	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1532389.582739	CEJ52p3hUFOfyUnth2	192.168.1.122	55860	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0yYb43YTbUZxKV3q3,Fu4za72OY6ntJPfmA4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1532983.245864	Cvwt8R1SoSm9VXvY9b	192.168.1.122	55861	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmiKAa480hTuvfg4R,FiuGzs2OHvVSIxywd6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1533290.037635	Ci7e4F2zadezPGqcPi	192.168.1.122	55863	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFsjMK78MYACPDQV3	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1533446.137194	CgiRjN1RQmaOes8FPl	192.168.1.122	55864	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwRIDh2iKwD4jtT7yk	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1533569.479675	C7spqJ2pksLHY7xR4l	192.168.1.122	55865	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfNmAR2bo0UhflgOz2,FYi27Q2X2knKDCYgeh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1534172.145555	CpMfmh2MFN9PJzmGkf	192.168.1.122	55866	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FINl2bi6QdxpBUty9,FsGEJ31cL5ewbZrPIa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1534489.928016	C6OhF84EHHDdrIe1Zi	192.168.1.122	55868	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FtwJwy35ZnhtVL6QV5	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1534653.012902	CxOyOZ3DsHe0gukPe1	192.168.1.122	55869	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKKAXX3kbebOfJR6Hd	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1534780.340048	CoSvQl3DINGVFZlRp	192.168.1.122	55870	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcZFD2kMUtaqTAD5f,FuHDt81B4Hi1rCKCA2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1535386.020644	Crhwrt2W0i3SpS9413	192.168.1.122	55871	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlQHNAWFQiWPp0nWh,FGYoMJBY8bjYh8U4f	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1535659.806505	CnVlpV1O8PJjxKLP5j	192.168.1.122	55873	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7LlLg4oDS62NFFZM5	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1535816.876381	CMWEe04a3AbV3nCLW4	192.168.1.122	55874	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fi7qeOAqaqQzSi6cf	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1535975.207707	ChbxP2FqgBFs7tVxc	192.168.1.122	55875	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsR12U3rtVmvkYcc92,FLey6sIfUmOgCqqC5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1536575.882023	CSZes811sbgIIt7FDj	192.168.1.122	55876	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F886REXgzu6AmbT2f,FNly5z35Ng9NnvqKbg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1536880.653172	CI04Y21MM0QGylToll	192.168.1.122	55878	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzJpSn4f6Tr7m7Wbq6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1537003.720120	CZBhbz4tnYqVErInUg	192.168.1.122	55879	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fwn09O1FWPVpvkLVDj	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1537154.051891	C7h63a4f1kBaDd4ifh	192.168.1.122	55880	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Flstfw4cpUadnzFAlb,FGBXC14ah4or2n0129	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1537711.734497	CLl2K21SbKiqJrao1l	192.168.1.122	55881	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZLTtqMzQwcWHbJG5,FavUSD2yXqNeDZAr1g	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1538034.510226	ChMOLg181ENlUx8i57	192.168.1.122	55883	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FyB0Dy2E67avTrKKT5	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1538190.588922	CLhP7k1zrtSCwbmyxf	192.168.1.122	55884	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fs46nU2jcXsxOeCoT8	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1538322.933549	CfGWw24gHW0fk9i6G1	192.168.1.122	55885	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2hq9w2lPRw36W96Oj,F8r20p1wtyVPTi7EQa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1538944.597310	Ci2PSD3lJEQSzLcSe1	192.168.1.122	55886	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmCAe33swPk6ePvEw6,FILfi52kYl4Jyvr6Sf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1539282.382687	CMa0Aa13pzhP1UJwdh	192.168.1.122	55888	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3hqMM2tsUQtkdt762	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1539444.471642	C7szxHMZELV42HQC5	192.168.1.122	55889	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FaMXKj4goEyveBFyz1	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1539578.798999	CCF7tXplw8kAM8cKb	192.168.1.122	55890	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXG3RN1F1QLhOUKrXb,Fb67oR1os7TEkR6Ko7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1540143.490832	CFC7TN2Cu5Jy8Yysgj	192.168.1.122	55891	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fh1VSU1MoEOV00NBk3,FcGj6P1YR6PnYtSMcl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1540452.272624	CLAw3GyjGqlJ7UkN5	192.168.1.122	55893	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1FDsW38DqOmFq6ppi	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1540604.359484	CMaioB4Nr5zXIpzdE8	192.168.1.122	55894	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FuxawQinAqJZTGeq6	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1540773.697160	ChuSz23Cc39Kh5Wx7e	192.168.1.122	55895	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4bV1w1CZOf5cuDl9g,FLiuGj303poS9u3asg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1541372.377697	CbDd4Q36pVO41T5YN7	192.168.1.122	55896	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKB6i52Dz9jAmDMiob,FrmUrA3AMDFW6hXwFb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1541691.152017	CZYhRe38pglNVCCD5d	192.168.1.122	55898	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKeXCE1Fyb9qqh52I7	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1541868.206480	CpY5iRkcwtCQ90ja4	192.168.1.122	55899	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F45qgpVqAVSUOdXP4	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1541996.545293	ClCx1q4v8UjDbsvMAi	192.168.1.122	55900	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FycdgK1GB23L1nlhHf,FYjmy9St4hcMjMUMj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1542545.224009	CkHVEbliFflbr7L6a	192.168.1.122	55901	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZCVh2AKv6WDW16l1,F2n9HF2JGOemRLMHfa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1542843.996997	CpygNG3u9BrbEFuVmj	192.168.1.122	55903	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Ffmcv71UAwc7r0dvU	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1542988.066427	CQ8a6K18NPbpulGgf4	192.168.1.122	55904	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgpPZFX5sTg1H7j6a	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1543121.392317	C5pCWp1ToSGCK2tDo4	192.168.1.122	55905	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTXRxc9ucwBB3zyjk,FvShb41Ogk766hEE3i	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1543749.054670	CYhpKR3MW4zKLTvf21	192.168.1.122	55906	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhPlHtAxZX8rRQiq,FKOL9n2hJy43wbnAFi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1544070.815407	CPzYPg1bcpfxS6C3Ne	192.168.1.122	55908	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FjD4i33qTOJ7VmMm9d	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1544234.888773	Ca8DzTOdRFCJxFSQ3	192.168.1.122	55909	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FusjNo1c90CQ696WBd	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1544412.218286	CA9xr6MbyWwLKTzA8	192.168.1.122	55910	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFHh0cwGNZkf1VWsh,FCQl2koCL4fNNPRy9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1545051.908296	CC6OQH35TQLUV84Ag4	192.168.1.122	55911	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhHSuQ3T2y4KBhd7xh,FHMlHI1CzI5R40eQg9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1545385.399079	CTdaBN2fWGktrNrJ46	192.168.1.122	55913	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FksJZx3RsiH4qnmnP7	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1545557.510958	C5Pap04tLbJTHyybi3	192.168.1.122	55914	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6wibU3NdPaUe012fb	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1545679.840727	CbMOva3kRsvCGqZbql	192.168.1.122	55915	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvVifM125PGwgiCMX3,FBxKCz3cFa2UkW0w86	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1546257.512177	CBwy6Q36LLUfQ50XQb	192.168.1.122	55916	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHtPwS1UGVyKiHibl8,Fgsiuy3dWEp3HflNWk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1546522.003417	Cm4eSk1euODSxTQHkd	192.168.1.122	55918	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FiVvrC2Uax0kfm0qil	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1546698.088118	CQnmRC4eUi0VKemFZ6	192.168.1.122	55919	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGuti81swipZY5DGri	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1546877.422726	CCERWp0NmLE08T3M5	192.168.1.122	55920	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoQ4973IJfwMx6qKs5,FcFPkZ3Py5n519B6gg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1547503.092326	CCAdRF2pgZOHhCGUKj	192.168.1.122	55921	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPKaQu2iUP7jWSuxVb,F6se4m4I2A57thjUW6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1547824.883135	CNkdez4HkkGFmFoT9i	192.168.1.122	55923	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZSns92WAYHAupNel	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1547968.968764	C7nyTFiDoOg3tjFd4	192.168.1.122	55924	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZ16dB3JtvDwAz2jba	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1548142.301486	CELzopWLNHWwf64zj	192.168.1.122	55925	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvN9dl2RG4J1ZBe9Ee,FRShrLCqAcYiyz2Jl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1548800.978340	CwnYqP3u24VKQfNVy3	192.168.1.122	55926	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBAGwl1JNCnfq2CTBh,FDGLGb2HT2v4WNgHtd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1549108.759886	Ct7IFE3sXQL7Wc1jr4	192.168.1.122	55928	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhbnLEQtdp1OZSUE7	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1549271.861146	Cbva4q4LvkX9TMDpBj	192.168.1.122	55929	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHbq213RQYVO0thQtg	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1549405.197355	C7bZGjXRciYyfk7U2	192.168.1.122	55930	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJHPfq4jr8VCAZS5ie,Fu6MohXoSXsueXGzg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1549949.880272	CRUhre1kxfZElGeie3	192.168.1.122	55931	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJOl7KDkKsYdArtoe,FRbyH5MS4bSmYm8R3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1550258.380775	CsLXwb1gzP1XwdJYJ9	192.168.1.122	55933	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FeVHuM3hx9NXFNjTE6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1550386.503608	CjIFLn4qitiiowgUud	192.168.1.122	55934	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fw1P5L2gHdbAG4wlI	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1550527.832317	CvAxPD1iv98a45Z3R9	192.168.1.122	55935	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHoxs19gmuqCNlitb,F9QMEU3yFuyxv1aK27	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1551175.511489	CCt3Pu4D68zukebWgh	192.168.1.122	55936	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnkzD32a2OJ4aiV6M7,FYb9hs3DdXge0Ao5Bd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1551449.268013	CDEGPA4BRajfCa6v13	192.168.1.122	55938	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FThjmO1qw0F82BD9q9	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1551576.354135	CnidAq2wiri26TL7V2	192.168.1.122	55939	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfFXvA2XjzxbDRZd2g	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1551696.680664	CEwA2n1WkNNlVOd2Lh	192.168.1.122	55940	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiW2CY2iiBC5Lu4APb,FUbg4l3li2dKS7we44	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1552020.857992	CG9E781NBtqDNucOZh	192.168.1.122	55941	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXZe5H33fD6x8Czseb,FarkRfVlmG5wgVew6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1552348.625226	COres1ePUBxJZtaag	192.168.1.122	55943	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGKSEd944pDrJmS2k	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1552527.702172	CzRNu12lKMMzHopAEl	192.168.1.122	55944	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FVAuvm3xy2ruOKUGAe	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1552705.031088	Chc4ej3cjtsCtKQhX6	192.168.1.122	55945	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F75UJ3166SLgeUTNwe,F8CjIcW6P3M5TEKhg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1553363.708485	CUTKhg1te6Chq4Zv43	192.168.1.122	55946	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIZ3rZ3f3dfhciF5n,F5VNLJ3oAZ3dGoPj3d	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1553656.179438	CaetUd44IkuOCWQUU6	192.168.1.122	55948	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fkbixh4YkPyBJR4V9	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1553793.291575	CtjAYZ3b3GZ4cDl51d	192.168.1.122	55949	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FyeVP43PouTF6pDOf7	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1553937.623663	CExeA24MP3xvat1Acf	192.168.1.122	55950	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fq42tvqfXPizAeNIi,FQZafm1x91Txtd2p1a	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1554491.289571	CjGEaG48LtJtUyEazh	192.168.1.122	55951	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmmgaD4i2fJlKIRGG8,FvYHtL8lBlkwKENM1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1554755.064066	CSDdqW1EoB1XxykpFg	192.168.1.122	55953	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYnz024ik25zI3jNy6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1554885.141885	CMDV8N19jDTt3dxK8g	192.168.1.122	55954	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxkTn945JTr5KnZUC3	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1555057.473881	CGTbPW3Llf9jQynF1g	192.168.1.122	55955	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F20NUI3lkOJj6QuzJ8,FguW0227LUfyalK21e	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1555300.653146	CI8mGo46yL2yxtVZU3	192.168.1.122	55956	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fl6Q8q3X1o95PpTpHa,FWBFUw37O6vn8epxEj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1555627.444028	CziZo4rTLJcQ6URi	192.168.1.122	55958	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fj1k551Xo3Czz2o48c	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1555794.559106	CfoTaoIm8Rk8RjPS	192.168.1.122	55959	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWJCcf1dRH1RouDU4i	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1555951.889911	ChJc4d1U5e5JcJqH24	192.168.1.122	55960	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxxGp41KnhsWK8TbHf,FUzFiq2p3m17sstvol	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1556509.561583	CoehVd3YCF6ZtmplCg	192.168.1.122	55961	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJl8ob4USUmxilfpea,Frl4I02CrXwI1GZMJ	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1556784.316149	CVDicD4mNJ0kJLg9vf	192.168.1.122	55963	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzpE0r4ipacoh1Tnyh	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1556907.369216	CeVL7j2aQJgQ64ZKjh	192.168.1.122	55964	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FAEgeb3CJ8iIi1zpLd	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1557082.705535	CkUttb4zIRlCwzYFN4	192.168.1.122	55965	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHEUz14kz21VY40b51,FDCCe02oUUFhnHVqne	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1557738.378553	Cp73b02FzXB4jbMvXk	192.168.1.122	55966	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBkfE83nU7ZIiMj5x1,FieakO5ZDJiMpb5Ti	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1558031.186019	CLZlALRPBolq8nFn2	192.168.1.122	55968	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIYW274GnG9fT7HVY6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1558163.324974	COEpMY2JNMDGTx0rpd	192.168.1.122	55969	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FByP96KtgP6116731	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1558319.664122	Ca2W3G4sZ4X924sPI5	192.168.1.122	55970	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3xjjM2Vu1tnzMnCmb,FnYKvi1G6ZAYa0y5Hc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1558583.843680	ChPBRO4m9omTJURR7	192.168.1.122	55971	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPEyhq4e6DMVzufc7b,FmcUr6TGCauYXCR5a	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1558878.350991	CCJDLg4LL8YLSMHUz9	192.168.1.122	55973	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F24aF71ahuPnMF2UNc	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1559054.436412	CRQgSa4MwOOARPBIl1	192.168.1.122	55974	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F17RkF472L78TWc0ac	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1559204.766706	CaOXdL2NqxrNPEvuD5	192.168.1.122	55975	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZ25rpysalisGuha,FWvXaD9MPjWIOFm84	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1559445.933194	C1JbUXZTaIQ8TQZz4	192.168.1.122	55976	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuYdNT24opzQ2PdbC7,Fu5yzk37d6tAP2IIB	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1559782.692346	COyEib4fiSEnJeIut8	192.168.1.122	55978	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8exyp3Ui4OLBMfozg	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1559948.732092	C8fwRs2GesLYNOniWi	192.168.1.122	55979	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqMbps2DAywAEBsWBg	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1560076.103437	CuUWzi26mynJ1XL6E9	192.168.1.122	55980	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9JNSF33pdi66zYqq3,FYASzd14n9nusCZlzd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1560709.780869	CMvDP52wKS19S4bOE8	192.168.1.122	55981	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5gyEA2CBiOTN1xE82,Fv1yHZ1C0lMIGzlM6j	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1561033.563127	C2E7sX3mgTUthNtltk	192.168.1.122	55983	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHUtIA3rg76a32P3f4	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1561191.649161	CCpLlG2E2no6owxsna	192.168.1.122	55984	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FCTLb23UVMhQuzmmRh	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1561359.975320	CYEmrv1nB0JpAEUAP1	192.168.1.122	55985	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ftxm5zScrM77C6a5c,FYShLFhNDVDK7pOA4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1561958.666701	CQozGY2Qo0E76eyAq9	192.168.1.122	55986	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGgxSkviYZPFyfWmj,FSzTST1x6uCrqTepa1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1562552.671699	CiAfPmtyVylwhapL7	192.168.1.122	55988	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F963Oq24x3v3I1uY2g	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1562730.783142	CnCo8n2hjJnaHhlSMl	192.168.1.122	55989	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FoVhv32J1mlBPleaAc	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1562851.158324	CfzyXp4A9LAjILGwGa	192.168.1.122	55990	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FE65y62dQYJQj5PFOh,FP6na74b3cVZfOwQW5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1563416.832633	CKqBHJ1jh4a4OYiw0i	192.168.1.122	55991	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ft4Qoq3FAYSssImCF,F9EQhS3UBXkgcAIVaf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1563684.605046	CtWInX33x3O13kGYE3	192.168.1.122	55993	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDREg53EjBDGYlyzGb	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1563860.676366	CLFqngM79ywOLI0al	192.168.1.122	55994	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqGAMC4bMdq8Oq7ePj	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1564014.001254	CfBtcp4y8oxag6BLX7	192.168.1.122	55995	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FX1fIA43I0FZqQZMj,FIPkdh2TLTT3Jj6nbc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1564313.191424	C0Smfh39hmEuv1vev	192.168.1.122	55996	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhS0ob8tu1hDCKTri,FyD1vx4rDSHCiG3lv3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1564635.982075	Cocc6h3U7nqhYkQLob	192.168.1.122	55998	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FkjOzy3zXpzoRltJ08	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1564812.054526	CRVCwF4jhth37Fderd	192.168.1.122	55999	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FAGTpn2t60mcfmRfMl	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1564974.382327	C1ioGI2QmugEGj10k1	192.168.1.122	56000	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FozSti1sRlM7H7mEga,FinD0C1ceeVCUuAFo7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1565583.057367	CVLY8q1C8XBW0hdZ5d	192.168.1.122	56001	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZPwgj4ymIbo85sQZ3,FhFtJN1DwgNQTDawVa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1565902.824030	C8Scgq4s1yyY06TLla	192.168.1.122	56003	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgL2kY37GuSZK2kJga	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1566079.897133	CSXrAb4OBJXg505Q74	192.168.1.122	56004	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtgbU24eIGkp3iB6ag	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1566248.213301	CgTrFz16vsM4omyzQh	192.168.1.122	56005	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKQpwA4i7TvJJnceOg,F7jThY1pTtpKhGzz2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1566877.888862	CrrxXv5okSyYnByle	192.168.1.122	56006	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHZ53m1BK8Qi4CuwTe,Fsw7By4DUb0oMtO3f	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1567178.636810	CnOfFo1NDEIsee7agj	192.168.1.122	56008	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKioFs15a2vkY2QHEe	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1567338.697116	C7DxIx1aOgId1WHdta	192.168.1.122	56009	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIoaTz4iTPCdLDv89j	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1567492.022117	CzbpFCGHMMzPU3tle	192.168.1.122	56010	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fk2VIe35BviVXoBBM7,F2oCBUOXNIh0DpAu9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1567790.210347	CMsuNH3tOC50kcDTFe	192.168.1.122	56011	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtspXi25oy8MW5tc1g,FEO0zZ3UP2ZJiIEBgd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1568058.978672	Cn5zMC2FPNtmASynMa	192.168.1.122	56013	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZebMn3EOzPAUtYIU2	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1568215.027384	CFmP3U2vsnI1iXuvnb	192.168.1.122	56014	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fsu1i54QyLI4X1GFPd	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1568359.358661	C6ZFvq3kyekqkAWZOg	192.168.1.122	56015	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxzZFR21UjcGb9t8I3,F3Bmdq37viVWzJmFCe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1568659.530618	CQ7Bqs17B9G3qpv0Hj	192.168.1.122	56016	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FU8tiufCRlfn7BDwk,FG2OZs18VvyswgNmN5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1568943.298908	Ch0tZ52sgR3Vdn7Y77	192.168.1.122	56018	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FenWVIGMzGUcsdIX2	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1569072.360173	CTB5Wq49cDyqW0Bvu1	192.168.1.122	56019	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdiJTrrLnXaaq0kyg	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1569235.689118	CQ9m1pzfLAn4ERF1c	192.168.1.122	56020	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFKsYa7g6D2PCP26l,FUD4DopnWNHAICkOk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1569881.357278	CVJzonmKK4BDknvcl	192.168.1.122	56021	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FufIwZ18ISHQYkrBxj,FrY3NU3rd90zvPnhBa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1570200.145948	CcR5Ep31pTTYzGXWY8	192.168.1.122	56023	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F9Au3F4oIluV35Wo7h	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1570378.237768	CcXxmuXz3RsOiRtwc	192.168.1.122	56024	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Ffv7mI37horuJ3gm7j	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1570545.561470	CCpzMq2il6WoFl8x7a	192.168.1.122	56025	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8Cfs51nkYAHPF1SZ8,FSNCws21qDSsCWaeVl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1571191.230422	CnvhuC3S7W1lTOSZp8	192.168.1.122	56026	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fryg0L1ui0M3nPZprc,Fd9ltulPvinkVIqlg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1571537.018135	Cr3aMZ2Pu4mwmxGmh9	192.168.1.122	56028	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCHfBS1LbOIgHAlyB8	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1571709.101104	CMIq16bco470oJaQl	192.168.1.122	56029	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FnNzCY2K1DFNr5H2D8	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1571879.429890	CPCT7TKxVHNAOj7f3	192.168.1.122	56030	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fz5lJX1OYR4RLS6G4i,Fy2URk1YZWaDgrtlCf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1572524.107146	C70cgG1uLPnXNzOE5	192.168.1.122	56031	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7x0Tm1m4cpuNyA5P5,F0HyUS3UwhqebOTkB9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1572827.881590	C08yAg27XTIuztJnX7	192.168.1.122	56033	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQ74U54lucqjeLFo68	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1572973.959461	C3s8SP2un6ZXGlfnS6	192.168.1.122	56034	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FX5lIn4ALpDnO4iuhh	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1573115.286755	CcH4Kp4fcmyGx1aEwd	192.168.1.122	56035	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqsiVo2GNA7RjVpQEl,FESWAodjY6dkQh3t7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1573428.457647	COTpkS3829AloPIkJ4	192.168.1.122	56036	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwRwiyrmsaoiPfol2,FAMPmj1hJFe71cXAUk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1573738.207246	CuoC5E1TFTFAGnzEPe	192.168.1.122	56038	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FfTQ5S1kJovb6k8Bbh	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1573890.246993	CELsC01DeEKXOz3Cs5	192.168.1.122	56039	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWXA951VdO3EFci696	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1574065.593718	CmEN7i4bQojHZWEDC7	192.168.1.122	56040	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FALu8U1AiwJLor7Ked,Fahxin2JqgLdKp7R1h	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1574610.266479	CihsrG43hpvUwojlMe	192.168.1.122	56041	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fkl8Bo9kboZmf1o3j,FuMgIE21DaCD9MFzJ	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1574893.058438	CwmfEMKPOcb19ll4b	192.168.1.122	56043	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYd7x31mgu1PXtAVDb	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1575027.141553	CCd2EJ2j4jAwz7iGdl	192.168.1.122	56044	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FeVbe4Na63zohkeBj	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1575175.468909	CsUQS23SNrkywvgxo	192.168.1.122	56045	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FK9VKI1NZxNF9e3dhi,FyUsZg1xKb31xMNxa7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1575458.646667	CATln13Fk13sM0lvY6	192.168.1.122	56046	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTVypy1lTynJ8uLJU4,FCXhtF4PPFnVWQX5u7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1575727.418622	CkDViO3nvbicrnhrae	192.168.1.122	56048	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgpjKl1cOwcGPj0W32	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1575902.499926	CjzP9hKjzuGEDbhCg	192.168.1.122	56049	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYpTHe3yAWRCQV0vI7	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1576042.816420	Cb3H4Z3GLWgi2R8RO1	192.168.1.122	56050	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWStNs2VLOp8dkyST7,FEdsiH19L9C0g8ioHf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1576620.507152	CIPbF158xed03SSUh	192.168.1.122	56051	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGIIEK1EovcCLOL7h8,F1JMq53Y1y5w91F021	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1576935.288089	CfwFlZ1Z55tBVpeHyb	192.168.1.122	56053	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2dVlf4n320YCqqn3f	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1577114.372184	C4jb6X27MygWNVLYJd	192.168.1.122	56054	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJle0R18Vr4kJQuIra	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1577273.715387	CMufJI1JmaCAf8myN4	192.168.1.122	56055	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQnkP5tMrmZCry9pc,F0J5Yg3VdHMMjEOcK8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1577928.406910	CyaiFz10YCq9mApeD5	192.168.1.122	56056	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyBr9x2zswy6NUkz55,FBXvSF4Qz5En34vKra	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1578279.197729	Cydk1V1faKgkbelDeb	192.168.1.122	56058	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0B7T64Q1VuaMrtX64	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1578432.257722	CegaSR1GqWPbaRTpk5	192.168.1.122	56059	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7CtD03hBb6uWvamBb	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1578608.585754	C2qa1O1ciQwHnnIIn2	192.168.1.122	56060	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMPNrQ1TsPZxSPclxh,FK0oPr4w3fiGcFKq6a	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1579188.258755	CEPMqv3FRoWqULew44	192.168.1.122	56061	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0J2LOvlCdUCuqc43,FuaJwm16B7L0qK9Ybe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1579500.934565	CzFy3j4sP9SiCvk9Bk	192.168.1.122	56063	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRxXsC2CDxEFkGf4Cc	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1579655.025251	CBK7xx2namYeSWVaF	192.168.1.122	56064	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmazyHrCXvtcFCFL7	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1579825.354736	CI8zH53o9NfLZfyoTg	192.168.1.122	56065	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F54TOp2LPwf5WiPMu4,Ff8luD2DVQIxXl0D3e	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1580143.822530	Cfkbr1iv2xzkoUzX5	192.168.1.122	56066	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXLoOH1ljTh3JKOq96,FqGH6d1E8M2mYoExPk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1580443.578100	CwIhC11fwTadwd9Jxl	192.168.1.122	56068	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIklWQ3f6W0mhr4eAa	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1580590.658439	ClUGf12wC0b94XElPa	192.168.1.122	56069	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F94v1b4Ombs1N7WPV8	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1580753.998997	CJltTD171vieQxoZhl	192.168.1.122	56070	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZ8b7F2WV56fqshaG,FrLIiu2AWJqNnnktR1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1581354.673396	CwWVty2A2C7qRlaBg4	192.168.1.122	56071	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWwPPd1XhEa3VcUDd6,FYetSq1kmPf1DMQIw6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1581637.454965	CQUbek4mzfVpW9Roq5	192.168.1.122	56073	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fv1Rwi3mz9Kv11eUsj	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1581811.535547	CD2Z4G1bovhVXZoyB6	192.168.1.122	56074	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqNE5H16I8Ni4wrKT9	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1581931.883472	CHDg2z3Rxt5uM0qZU5	192.168.1.122	56075	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FI5olALqsjgk3D9b8,FCKrDg4zY026yquAk1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1582569.560294	CcS2JI3qRWCAWbhG34	192.168.1.122	56076	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTTPJjl2EyMT3VNw5,F2AjsluN1vN4lLhLf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1582846.008188	CJLAzN3EzkOlQ6klE1	192.168.1.122	56078	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Foy9qQWzlNvJso0pj	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1583012.072471	CIuQeb2fqdw5b3HmR6	192.168.1.122	56079	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FyUKmS3iyc47V52P34	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1583184.403860	C26ckJ2oYqCfqgUyrg	192.168.1.122	56080	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOIvIZmZIHRMR1Fol,FdUQiK3laRnRJeC8E1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1583786.079276	CSzwFmesISYIDrHU1	192.168.1.122	56081	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9Pcz938JqMCFLk7T1,Fy9ksA3hJ54JGImK6l	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1584083.855651	C0KK6Y3C4ysdozFe1	192.168.1.122	56083	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FyGwfB4kYv5PAxI56d	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1584217.915563	Cr5iqau4smhPqJjQa	192.168.1.122	56084	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6wtM73mfjOY5ks6ij	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1584346.244861	C8k9OjRpFEgsXBKfe	192.168.1.122	56085	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEl47W16tXS6fF7tH7,FkBs0c3D53bUiSVCEk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1584952.907349	C0DRdzyd5wglnK565	192.168.1.122	56086	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fzpyd54sTuFHQIv3I2,FHVSAuf1F8qAhMQkd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1585287.381635	ClQhriqOK7Uk17DU4	192.168.1.122	56088	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FyIHC63uHhALpBGuD4	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1585432.461779	CZtLo23A46B9omGkr	192.168.1.122	56089	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMcF1Jwq3ApTvzRz6	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1585582.792051	ClnKo21eOkgIpkiZye	192.168.1.122	56090	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FANENsx1h83clNwF,F8DIhh4xL3s1ZaXiFf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1586181.463515	CZ4T08YabVjrbNOU9	192.168.1.122	56091	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FepR6b0tuk4464Lfc,FLZ1WInrRfZJUD3z3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1586501.251490	CE8Bmg3liTKQ3Htqn8	192.168.1.122	56093	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FfjfvJSRoZBdJ7mtk	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1586669.350780	CJ166q4F3ryfF6G4Ma	192.168.1.122	56094	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7CyCrmARRKG4ed0g	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1586802.676419	CV8xp63o5yLrK3m8Uk	192.168.1.122	56095	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGMmQnkwRMGBr9tUh,FiOAC7359U4uSbrwb1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1587365.365439	Cypi0QFkkbR7qkHvg	192.168.1.122	56096	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FU5Wxm0HZi4j5cNJ2,F3Esx14Nw3YejgWYl7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1587695.146630	CHnGNJ2cuqNHn1nImb	192.168.1.122	56098	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNfQD03nbE4NG01Fjj	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1587830.229435	CLM0J24wltzWeVS7vc	192.168.1.122	56099	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBKnCV10fgTKRuyvWl	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1587977.556960	CVtVWl3PKuvLynIIGl	192.168.1.122	56100	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FT5oY12Kf8qZ2XPYDg,FTCMma1zcIK9bEwrIf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1588637.234288	CRXCKG2eBF6TbkJBh	192.168.1.122	56101	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHUlusYt9ax7Kag37,FegJg11glKEeA6WfVb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1588950.048024	C1XsfL7imOoDer4Ef	192.168.1.122	56103	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzRd2hHUwvhWplYx6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1589104.130611	CuHJdi2jJYpGDIXBYk	192.168.1.122	56104	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6jSQ21XdQSzZTzGOf	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1589267.449926	Ch5C852YszryRErLZ2	192.168.1.122	56105	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPxg9j2mn0pYMYDkm4,FzCe2o452F0xqwHFhe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1589592.637706	CwUxRC3wOttQ3hcJB9	192.168.1.122	56106	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F12yzj2LTx6BuVt7n1,Fp8p2a14on4ZZ9O9Ea	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1589856.409475	CNRawl352K0n2VFqV6	192.168.1.122	56108	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLN0kL3FiySPOmGxyi	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1590035.469488	C8dscqChVqvLyDJrj	192.168.1.122	56109	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FS52na1COerCNRCZti	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1590212.799446	C4SFhz1HmeSioLJjb7	192.168.1.122	56110	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKUfyy1n0QagNwVHDe,FQuFB6Vrwr3awXSmd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1590829.485914	CrsAAm3BfERv3ako4i	192.168.1.122	56111	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjoE5Y2BcD2kDvQEfl,FtXXe24KigYdg8Wmad	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1591158.263515	CqvMcZ3IZlPur8o9pi	192.168.1.122	56113	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F42SAz4x4pnB9IxEx3	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1591285.327020	C7ecel2400h7NJRNKl	192.168.1.122	56114	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqufqV1c6gxzBfxayb	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1591444.660378	CdFZ1U1JXLJJ7vPwj	192.168.1.122	56115	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2Zm4o4NWbptz4yUc,F8gCvN2r5SNdpA0ML2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1592064.341486	CgNdRP3NUmAhuoLq6j	192.168.1.122	56116	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fi8ZPvuCR1hemXP88,FA1Uhn2VfIfKWOe7Z	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1592392.799574	CXzK4F4eOY4Y7RA264	192.168.1.122	56118	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzFil52itYrhIdAfhg	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1592556.855256	CL01X62XPWTHfQ60cf	192.168.1.122	56119	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0M37b4E5qrbAEZiw4	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1592683.184305	CHE7kB2MJf3fMsg6r1	192.168.1.122	56120	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTaU6IPYw1T4a1GDk,FCxMdp2xV05boDc3si	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1593250.867422	CfZISn2QdU9EmD5uw6	192.168.1.122	56121	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrTb9U3ilG6KzjMWu4,FmJI6J2whcEa9usIsh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1593542.652353	CZwk4Kd9341tNzCH7	192.168.1.122	56123	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwuYYg2xevRebp1wEe	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1593715.721635	CAjuSy2qRbEyTdLrNl	192.168.1.122	56124	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWoIod13tiejTcym66	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1593890.046334	C3Mu8t1Nfn1PmwFsb7	192.168.1.122	56125	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNYsDd2rAPUEIBh3Vj,FNCQQEIvv6DuMycl7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1594133.225915	CcZbHh4RrYxLunzkI2	192.168.1.122	56126	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7fpwJ2xW4kbVAdK17,Fgf9fNWx3quMMfFs7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1594480.986860	CG2VLn7SLTW2gxeTc	192.168.1.122	56128	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYAH0n3McRrwzzXCPh	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1594610.047147	Chlo6a1HDALq7XLHb2	192.168.1.122	56129	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4S9IA1DDiit9mY237	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1594734.380251	Cc3Fxr3DztyxECTLRi	192.168.1.122	56130	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrMb9d2opS9C5GBxHk,Fxi76K1b1Rggy0gSB1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1595333.071386	CCXy9S2Bbs1MGDtjK4	192.168.1.122	56131	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjODsq4KJywVUnzon7,Ftrk5j3t2f053WD0u2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1595623.876119	CLsnmK2Ql29vPEyDK2	192.168.1.122	56133	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FEScEl2DqdQ4IZWSMf	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1595771.978485	C99sw91UG5XIrUux91	192.168.1.122	56134	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHXgV84vG0eMvO11K4	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1595938.311193	CPa3cz2m0pMOcjGir6	192.168.1.122	56135	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPrTOn2KYB8LOIEcSc,FljOYW2WTu1Tlog51b	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1596522.991896	CRRbPq4IGaVUb6FJjk	192.168.1.122	56136	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FY5Dcy18QjEME526y9,FUBzIq1VE0NRyPY7Sj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1596814.777154	C2009u4EmFFWhA9u3	192.168.1.122	56138	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYp2wM3LME4n46sV4f	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1596943.882950	CkcP7h4Y5TvYQyVGc5	192.168.1.122	56139	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4mlHh2kwgnICVeAm	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1597066.212857	COLLYe3VbHDe9zD5uk	192.168.1.122	56140	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOF7141w7m9RDAF5vc,F6x5zE2mpJ5GgGfDTc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1597645.876586	CLhIIl1WKdUF8I9v3k	192.168.1.122	56141	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAyvw72jUicUx69sjc,F0ZYSd3H7H5X53UYzf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1597927.341297	CogA3o1U2C8mRXMH7k	192.168.1.122	56143	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5JCKXTlNB7mDe4R4	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1598055.431243	Cgaavj1FQI6RbAlWO9	192.168.1.122	56144	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBkgS228e6XiNnjhk	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1598204.760048	CTQqlIDigx7LE0bij	192.168.1.122	56145	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCDINJ1qTaLJfujdaa,FlpRAt1rPkY3P3c1G2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1598556.936761	CJ0c8L3mpzfrFZ5i5f	192.168.1.122	56146	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqiYUd3TMnr5UfIfpg,FnYdTt1MNzL8tcjZt5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1598873.733850	CLHFE84rieachCJ4di	192.168.1.122	56148	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPL8tv2hcng3BLiSrd	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1599049.810506	CumR2D3qh2JynDXhkg	192.168.1.122	56149	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fi1lG03e5hqQuBExyl	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1599206.130044	CjaYDH1P0ZVizd2cvl	192.168.1.122	56150	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuOilM3zpSdnsfodV3,FtY5SH2ub65ccVhxd6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1599840.803061	CZbS2Q3ax5yLwlop9l	192.168.1.122	56151	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ff6pok35LZ8fsUBIl8,Ff5hqV1WsY9EyPC8Hg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1600197.584762	CHQIy51MwUStrvugW2	192.168.1.122	56153	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FG0GJB2oKx0YNMh4Ai	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1600354.676653	CSyjrl3rXbCRFqdMoj	192.168.1.122	56154	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FjPIrOTVSSgZ7FvH7	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1600484.007535	Cx8LHi4yICR4fhWqBd	192.168.1.122	56155	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkujBSoa7rfOAJ6N,FlJxdu19yLtUGr7ol8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1600841.170472	C7j3EC4ZiDIUrLi1Xe	192.168.1.122	56156	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQzpGJtGVOt5i1E8c,FTdctv1qH7Xl3ZnSv5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1601172.951206	CoQEjQ32UmV1TzVRzj	192.168.1.122	56158	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fl2jJi1Cl7ACV228U6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1601294.017151	CRlodH2jNW5eVGdQDa	192.168.1.122	56159	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRNaas1qklrCtGK0J4	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1601422.336562	Cy28olqaT0Pc455e	192.168.1.122	56160	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNqXS91sm1PkJMLLz,FvP5QR2kVlmRGUvQ78	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1602075.004546	CvRYgF22m7AhlL23oe	192.168.1.122	56161	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZx1CG4is9EAMyrIri,FIvWK04LPqqO5GE1C2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1602659.999398	C72bTWXHjIEk2qQQj	192.168.1.122	56163	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FoJPl43XdGsxAkohD3	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1602820.082405	Cio0SP2xrVOucrfLY1	192.168.1.122	56164	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHbzdM1vvKmfXnlE8d	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1602984.412032	Cjcdwp3jnL462NJgFk	192.168.1.122	56165	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvS0wZ1DOAop6cus0f,FyOCmiNoHnEaTeSGa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1603595.110200	Cx4IWk3gJhKIDHG8aa	192.168.1.122	56166	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlR9Xm2JnYz9sVE666,F4ifvo247Z3YSoztXa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1603918.890828	CGru0z3knkrUkoHyYe	192.168.1.122	56168	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTud5l3GLI3A7knXk7	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1604064.961313	CIxGeKKeacEpwTMy7	192.168.1.122	56169	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5Qa8Q14RFhYdXVX8	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1604220.288848	CGyvNk1vCBwUPIcoze	192.168.1.122	56170	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8QXLD4iIY7NDFYNFe,F9tA7o3dGjcDaC9Mj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1604839.970013	CAFG9019arVhhYHO5k	192.168.1.122	56171	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTHsvi4vZyG9wKhFWg,FuzkAb2zdD7EohKEc2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1605123.457214	CWK3KX3fsH6PcOV0p4	192.168.1.122	56173	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3FkmH1y0Nowffssd	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1605245.558821	CqDh9w1qLhENJllsNc	192.168.1.122	56174	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FaHoso4emDxHld426	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1605393.876272	CijKnA2gte8g8r4jNb	192.168.1.122	56175	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgZ1Eh26q3BO0JraNd,FBMnUX39GU9JrCKlNc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1606025.554460	CiQL2P1yp8leXSKMq9	192.168.1.122	56176	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsSDUs15ovHkNebkb8,FcutZm1MKovAjA6vq1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1606355.342967	CYfg4b3JW38j6gHgfg	192.168.1.122	56178	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRr2aw1ypkJWwwmC9	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1606486.452957	CF5cKi4LbKZVrpDYHg	192.168.1.122	56179	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FAlOhw1gqLB1aq5hf	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1606664.783449	CEcNYc4XIaShBg7qP4	192.168.1.122	56180	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPwJdY3XdIwVFxtoxl,Fp9e4q2NIKaJRFa0P2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1606932.949130	CDlThe3bZsdk8c0M9	192.168.1.122	56181	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5NCwxHDn3s8ZPqrf,FQdBrj1eyINxkBk0wg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1607249.752594	CAbM2r4crHjAxdhRc6	192.168.1.122	56183	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHkcKt6X36lf2wScd	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1607386.857409	CjMqHF7yG6Sm7IUMd	192.168.1.122	56184	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FEU2No3xOlrfECTa7g	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1607539.191174	CbQZYj2KhVT73F23n7	192.168.1.122	56185	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAXnakB9NCk7m3yYl,FBfuUYHfCQBFlVBU	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1608155.857462	C0yfZN3zQLnAkoKsCe	192.168.1.122	56186	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRjsmM2lG6ZmCDa4N3,FWwmlh3QR7IZ5CW0A8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1608476.648001	CeGYQt3nQcuKSBM9Cb	192.168.1.122	56188	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqprMxr1y9XwAFGf2	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1608641.762132	CVFX4o1ISTLa7valFh	192.168.1.122	56189	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJr1q3489U1uD0qLsk	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1608798.080949	CzQw4h3w6VmMRoAqw	192.168.1.122	56190	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnaL7S34Ay9PpwnL68,FzVtyE2v16pQh5T2b8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1609386.747246	CgXbriJWpfkfq6Ff7	192.168.1.122	56191	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmxloI3IFmStK6cm7h,FgvhvV3SRzDjtYQ7ua	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1609736.540950	C7Bnr54zPTHyVXA623	192.168.1.122	56193	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8SwPG3fesuoGBOJkf	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1609889.646103	Cl44jK1dFSyvPpzCz7	192.168.1.122	56194	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXNFiR2cXtIybRjVUg	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1610051.963555	CC3EWD1l0CKicTGbXj	192.168.1.122	56195	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKngQGGjjxk1vaJQ2,FGka142RMVzHkgLFe1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1610662.641595	C75sOw2BIVKZSPcXgc	192.168.1.122	56196	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMeBtruoDYqwO7S6j,FVRqIB3N8irRGJjKql	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1610973.124116	CoPLZd3BWbYSeVS5Si	192.168.1.122	56198	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FeJkwJ2d0b7dGa49Zd	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1611148.195344	CpaD2w3B0V4BuECtfe	192.168.1.122	56199	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdXw0Q1Q0KXWrpF3eb	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1611307.518814	CMx1yma5H8Pz37g91	192.168.1.122	56200	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpQ5gE1Be92lzxht5,FOMY47ozm4eBbI2z2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1611937.204569	CTHJ0qsAPaPwVNsFi	192.168.1.122	56201	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpuneC251txTNCAOX9,FnKlWu31o7xYyiOZuk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1612226.975528	C38FMW3mAlIzhfKEai	192.168.1.122	56203	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMmDGo2CReMRKqKam1	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1612366.016651	CNQ3Oe2Z59IWJuVvwc	192.168.1.122	56204	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FC4v7l13Lv4LzMAzNb	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1612518.339580	CyZnOK3nOoDGzUm0Wa	192.168.1.122	56205	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrU6Ii2Wz8N61gqHWc,Fd593819nnTXI4naBe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1613131.030559	CucPG22avMrkiHhKbd	192.168.1.122	56206	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKbjKaqfVN75HITei,Fb1KqF2DBubmQd8z27	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1613458.816254	Cqqy3lI5Kp6mULLc5	192.168.1.122	56208	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fy0Xuo3WSy7OVmPoS	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1613587.912914	CHVtMPSmiINI3Du9i	192.168.1.122	56209	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FODfJv1Pp8T2zCaCG7	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1613751.242144	CWqQvM3ChHRGH3Ip83	192.168.1.122	56210	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9IXgb4jpqmcmg5p42,FPGsUc4YXV18Q5dJjj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1614101.716515	Ci8vL42kMYn9sRkEuk	192.168.1.122	56211	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEHAJv4xqNZiRAdzr1,FDttSs3HlAsDDcuC98	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1614365.511938	CbyH7m3DTjJvxGCo91	192.168.1.122	56213	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGHXEOKOqaA75Q1e1	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1614497.601253	Cl4r3tza8HpX2IbDh	192.168.1.122	56214	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhbPmf1J9UOH8v1kLh	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1614631.918234	CPk1lf3dXkIsYykP6e	192.168.1.122	56215	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fs2UXA2fPKolzSdRaa,Fed7wL3dkFe7iBDLZ6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1615189.590459	CIrpxe2ipE6piuKAZ7	192.168.1.122	56216	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5S5qpqu2ohUGPTS2,FkHYsz1ddnCnWJ2m5i	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1615513.092403	Clffdslx9w8ebkyX8	192.168.1.122	56218	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fe9km62UljqkfLnx14	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1615670.186925	CUNRxkOKylMhf51c6	192.168.1.122	56219	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F52uTl1nkgoYr95soh	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1615811.504587	Co081q3cemJ6cwxmpg	192.168.1.122	56220	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgxX0K3TAlklaya14a,FNlvU4GKDAa1AyvHg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1616384.176117	CTI0LM1ssP4mc5T3i1	192.168.1.122	56221	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAT5D92BiAGGRW7p7l,FEg4Cx5Co9GPv32e9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1616697.928146	C968qU2j5qImglvysi	192.168.1.122	56223	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2Fn7EP5jBS0W5tmg	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1616842.972900	CM9buVAy30RXl2ud4	192.168.1.122	56224	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Foz5md3hwy1XcGC8Pl	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1616973.305179	Clu22gl8nRakV1lLc	192.168.1.122	56225	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fwd8y7HiO47Cdr5P2,FJFrHrHa9ZLoxusKe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1617584.984334	CT8QFT1d8BAw0IiuDi	192.168.1.122	56226	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTONSm2MtuZU3vrMKe,F8mZ8CUzcG1uvsPQ5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1617920.762626	C7TiFz3JMtTb7P5aTb	192.168.1.122	56228	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F9dMNh1DJM3GclaEQc	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1618092.850034	CP2Gyq485HpsnRdqqj	192.168.1.122	56229	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7mNY81sRMhBc1JvSf	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1618245.243540	CHEyM64Ci5Vduw0BBk	192.168.1.122	56230	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3aYcHlvqT8aXQJad,FxT339gZ02xGGUvQl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1618793.912653	CNQSjh1Ug7kGFn45C4	192.168.1.122	56231	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiDB52DnfYe4uwk21,Fgbr748FCWNHHsdX	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1619079.403163	CAcLwr2PFbbDQ5jbBg	192.168.1.122	56233	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5hTAt4REWPPW9xLQl	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1619237.496094	CKEVuXOxNWIBt4eTk	192.168.1.122	56234	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7lUl21bmBaktZ3oN4	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1619391.812674	CX0cSo22XpjnAzKpq7	192.168.1.122	56235	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFmQ242J9CqmtkfWCj,FHboGE1zuRss4LujT9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1620050.499921	Csx9In7Vwmf18vUzd	192.168.1.122	56236	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fh3JNDgYyyiHeDi5d,Fc9CIs1cwDQfS5q5ja	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1620330.285364	CObfBC2sLlSNVNQtnb	192.168.1.122	56238	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fs8UFm2vZp7KGkTPtk	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1620460.354361	CQOjfN1R9MKTGyrY26	192.168.1.122	56239	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fa5Gz03eeLGa6Yasvf	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1620603.674590	C1IfjZC3I9H12NYHa	192.168.1.122	56240	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1av811huevrEgUEV5,F0iebA60VF5PdowDh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1620956.872638	CbGXY41Uof2GJ39UGl	192.168.1.122	56241	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FipzEZotDSnyTqJF6,FcyIFh3fHxI6SPl8F	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1621236.348630	CYM8fQ1pKUVdIT0Rwl	192.168.1.122	56243	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fhgr9J1y9XPeMyr9h	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1621406.415006	CfCUJ91Pomp7dPNXK4	192.168.1.122	56244	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FuqYx636Oom0IP19Hh	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1621562.733842	CXb1rp4zWXPGyeDXFc	192.168.1.122	56245	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtKH1a1n1y4LUhQQZc,FaBJRy4n788J3nAoje	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1622117.410464	C0lsQNKMjOpDPpby4	192.168.1.122	56246	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6t1Ej4GCneib2jfgd,FHWSBLQ3iUJAnVVBh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1622382.158468	C7PxiI29kxErHbVOg	192.168.1.122	56248	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0kLZP1c0ExBmA0qe8	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1622531.212515	CP7LLu44S8RqqKytf8	192.168.1.122	56249	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhsXYy3dGJzUvYo4lk	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1622701.531220	Cs8SOm4EvlEmKPOZ6a	192.168.1.122	56250	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFp9mI2iFkvRPHj2Lf,Fu5M9s1AJtnDDKlF0f	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1623326.209024	CcZneG2D3551Pmf0j	192.168.1.122	56251	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOY3uQNaoPMlM0Zwb,Fjwf332i3LKfKUic2i	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1623621.002554	CnFHgp3QYft9fPl8Ga	192.168.1.122	56253	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYpEbE2YgDmfgXLAjb	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1623762.072478	Co2ulb4PwAVZobyej4	192.168.1.122	56254	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5Kzkb3zoo2RpQuiif	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1623893.395016	CuOOp14UEV7MQoqgw5	192.168.1.122	56255	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8IVZd1MRjLw8vYUn7,FZ10bMKXjVxESOnH7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1624499.086041	Crg0dL28FpkbW7RMLd	192.168.1.122	56256	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fsn90j4ImzROZrB29b,FqrxeF4xwsBUGpAML6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1624770.859354	CKcGiyp83yRTMvok3	192.168.1.122	56258	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZgc5RBSFnSBzPjTh	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1624949.929092	CQ0fff45oeLdZLoSb3	192.168.1.122	56259	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FkGur7Q3dR24bVCnk	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1625097.245284	CM147d2VnObSC4pnj8	192.168.1.122	56260	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXW5GVKFFZxfm0mTf,F5BZpqSDuQI1SvtJl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1625737.936458	CrJy914GGrOyuRj0M3	192.168.1.122	56261	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FysjYJ2KyJPySdV8ah,Fj7RD52Vo9EoA2UX8l	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1626010.416511	CaaVcZk7H6IyeaLp	192.168.1.122	56263	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzO1nFFGC0n9Uk58d	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1626154.491853	CHDiwY1aRdC9b8dZMa	192.168.1.122	56264	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1aNBx231O1FIFBLgg	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1626323.818718	CVc42KqzxjrE2KBOg	192.168.1.122	56265	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLqAe12tpA5yRC8Oad,FTiLHi3xpnVNZ8YMJ8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1626609.309141	C021Ja3JMWfx0YrDme	192.168.1.122	56266	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F84Hux1JmKww1Vapt5,FdIG9k3aop0PQ6zGhb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1626909.073254	CHKwnkAPXkjcJYL45	192.168.1.122	56268	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNGAC93xUpZ254zLv5	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1627087.131693	C5Q8x13uHkIqn7ucH4	192.168.1.122	56269	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F26Cuwto3qobw1Fhh	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1627223.462425	Cw1kJ02qPr62hknBVa	192.168.1.122	56270	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fz5TzE1S4BlaQYMg94,Fo4iliFbjJdNLh9Nf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1627783.138034	CvQQ2X3rFILLV25El7	192.168.1.122	56271	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwQBXX3JE6NJcdVhz9,FE0MhyQ8np9XCmkg3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1628078.899692	COkllf2c3RVX4oeYF6	192.168.1.122	56273	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2jElH3eH6tGJntRHg	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1628199.972207	CP06CU3ykUgtKL4BKh	192.168.1.122	56274	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGJCPr4oDhKz8CU08c	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1628389.188397	CLBpew4Y3T7GEoTc9h	192.168.1.122	56275	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F372vV2SZhKetUX6Rl,FAD8xt2eTfRMguBgQe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1628931.888684	C9a0t62LLhc2gGyYng	192.168.1.122	56276	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRweB21caXlGraLdVi,FmIeMV3ViaEj9dyAXl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1629252.354044	C7sEDRdoDutQWX1B5	192.168.1.122	56278	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIaeN51rWzXMAVaWd8	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1629419.455324	CNcDxF2y2nk5B5UBP8	192.168.1.122	56279	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWa4t4B4ISY8BTtE3	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1629545.771202	C6ZSGe4BSAMi9wXyJ2	192.168.1.122	56280	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fctey6F6Q4kuXHQOb,F4CasI2utc4JWKdES7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1630130.473248	CcPKC04Z2WYp8FpMg	192.168.1.122	56281	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXsl9c2HHHLWLufpwa,FGciX918kbsD396N92	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1630448.972603	Ca2uwv15EMoGaXlwS7	192.168.1.122	56283	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJGfw5mi8sFV9u28	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1630574.055382	C81VHR2fOGdgE1RRvd	192.168.1.122	56284	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FC0lZ44Mb5zoTrQXPi	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1630711.376834	CVOmrs1Yjg65o8xVnj	192.168.1.122	56285	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F26D4F3HlvZKBDob33,FlTMg53GtfJHTSCyq4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1631295.056454	C3BTEQ2TV0RA5vyDua	192.168.1.122	56286	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDcMHWt0NHANPvCQ5,F6FCzaSW2cCc9DCqe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1631574.830808	Cvsjrq4zdoAWbeePid	192.168.1.122	56288	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FuUg7B1Ti9w6HiS4Xl	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1631704.890987	CTUW7Z1y0KE3ZWoWJ4	192.168.1.122	56289	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmxONx46O7YjsXGm08	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1631855.211511	CYGkTt2QFNp6SOzZei	192.168.1.122	56290	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fr5tn64UmCOrlz9uzk,F2uZ3l4NOb7Z9A0OQh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1632479.899993	CGQfDvMrnpmqcRqN2	192.168.1.122	56291	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyVaFp4Z49EzmLkh0i,FzsSxCFVG1zIwrm8i	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1632801.392145	CXcKpz3y9PbXvretfc	192.168.1.122	56293	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8eekcSL5Nywd76D6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1632930.463612	C9aGiv15SnC9uPAK3i	192.168.1.122	56294	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBDDCA4iBRSZ0VSS6g	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1633101.793768	CkCsFILcyavQeDcRg	192.168.1.122	56295	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FI2wHA280Di29vteoj,Fbz4CY3cqpN2aJta8b	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1633645.485916	C1m1eS3S7AqzrUs196	192.168.1.122	56296	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fu8Nm63agrZUdTrqOl,FOoNUb4DXQuxFiHX18	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1633934.236509	CkBxe24Kvtj5WmYAnf	192.168.1.122	56298	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKNhA73CVmtv1kIZHl	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1634071.294204	CxYQYh1Yg3583YDJh3	192.168.1.122	56299	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBj4ST2wQ1FvA5N5n7	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1634230.617039	CSRvxp2NDxQFEEjmS7	192.168.1.122	56300	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXIhLO27DdjHqoG8e8,FwfzNm4Ut984yoxPvk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1634810.300492	CvZglj18IbuVJuoDS2	192.168.1.122	56301	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFTgX64CEj5zaDCRj4,FLBtsz7Zn5aNb91fc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1635125.118599	CVFQ7d368hQwCdMJj3	192.168.1.122	56303	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWpyBF1kFAjBBezOAa	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1635277.237573	CXyFB01kDWSkiT2qma	192.168.1.122	56304	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNkiZO3k7ChSRhqOM4	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1635439.555890	C6FhJ94rBYQosrGt3i	192.168.1.122	56305	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIRm951DXLlF2uWj68,FVor921fuaHme3yNc9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1636061.228959	CHWYDk2qNqDjwBhQA6	192.168.1.122	56306	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fzds0eps3LGTjnV86,FycAjc4znDa1ZObrMj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1636365.001438	CgjXDtfPylhY2sd7a	192.168.1.122	56308	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFZBAo41CBlr1iE4M	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1636538.050208	CjUMR01yuHY82ogL79	192.168.1.122	56309	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXq5Hc3qmJ8YZOu4Je	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1636689.372001	CtgrpN3bTkDKUY4mY5	192.168.1.122	56310	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F35XK9aSy54i19vU2,FYYjG91PAENsCjvw16	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1637341.069245	CDgNYo4naVR1bQxALe	192.168.1.122	56311	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSPK4K2iBiV7Coytx3,FvvfjS1l83kipLz01	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1637623.858151	CO72Qx4z4Ovx3xCIe5	192.168.1.122	56313	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FEXmSJ2uDSB35aksvg	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1637786.945933	C7iRKEBpzHi76ray1	192.168.1.122	56314	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FbT6zu2umSwoTMfjv3	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1637936.272117	C7ob1hWZ1R1XZLNk3	192.168.1.122	56315	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLfS0c1yIogID2qbSh,FF9pp73wiUCF7Jfll4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1638478.955189	C4f7HU5U5IhLio6nf	192.168.1.122	56316	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FseJvr2g6d9r7iGpkk,F2c0rf3723UkEidoK	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1638802.764413	Cc2dX13xGgWgn6Wve5	192.168.1.122	56318	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdW2ngc9CkV7YAHHg	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1638937.861494	CuuzUz5MLifdw8XX5	192.168.1.122	56319	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FO1zPy2bFjJHePJnf8	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1639104.183803	CZsS664wbmJepnBhwc	192.168.1.122	56320	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRRoWw1gUVcF96BXeg,Fn9hu04We9lSPTv6y5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1639692.860791	C8g7vh4dh5mlqtnqgi	192.168.1.122	56321	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLg4002tyR9T6ujHnf,F6hhzH2N6xJlBop414	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1640010.625696	C7bYDKhA9VHLiyyEc	192.168.1.122	56323	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1OrrU3PFSrXZaH149	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1640180.678114	CS1GJTX6TbQYczoab	192.168.1.122	56324	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIk01CiRwsEn8NgJ4	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1640302.006168	CNvKIhaiv1Vqh0YI5	192.168.1.122	56325	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fvns5I2LG7DhrWAw3,FWibyu2nNxxpJUoKX6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1640893.707602	Ckrqwm2mW8U583WxY1	192.168.1.122	56326	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtqRzq3wGgHfHN9l5a,F908GE2WH4moTxJaVd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1641183.481763	CI5ThCwTBYKqDkMkl	192.168.1.122	56328	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLX8Hh4i6SrP5rdyDg	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1641355.567064	C9E2oI2FyT2gIBXe9e	192.168.1.122	56329	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBsXkP2Z4gOAkYYtp5	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1641510.884248	CYcFmu3KDdXhhvV4U4	192.168.1.122	56330	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQ1a174p1HpU46X3d9,F0IjoBFQKKy7fmRTa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1642140.570469	Ctx1My3AZ0D8pXssgh	192.168.1.122	56331	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5OgNZ2TOqFNHgwCbe,FSGXd71ztrJe0Clpr6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1642483.343705	CTCecl1FYkfoUEJZ0i	192.168.1.122	56333	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbT5FS1dTeND3puTkc	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1642647.408359	Ch5nHP3E0HNuSq2fQk	192.168.1.122	56334	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOiFOn3pAGaWLYV7Yd	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1642826.736264	CzWxinCn8t1n2raL8	192.168.1.122	56335	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHhXP71XwTWEpQwYY3,FgasGd3xMWPa0mA6ib	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1643372.430762	CfRFwY1i2YxiRTOGa1	192.168.1.122	56336	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQbQqp2gSMLi72QIBc,FDsToS1bEo4vYBLvm	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1643693.208711	Cgnq574MSFZU1H23ci	192.168.1.122	56338	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FY2qiu2goUqFi7efNa	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1643871.264014	Ckilm426iAZvWhcoI9	192.168.1.122	56339	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FuOzEc39lplPcnZKM2	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1643998.591134	CBnJbsR26qIImAJq5	192.168.1.122	56340	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHKkRZnVBFZQIDym7,FpTT2n28L4jpNDELi6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1644547.290086	CXYD9a4L9mjIqlcKjk	192.168.1.122	56341	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXSvxJ2znwCU3t1Na4,FdDPmC2rjRoSeb9SK1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1644835.090487	CoAgsK1J2UKpjgwN18	192.168.1.122	56343	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FjfbQG5RjZNFPaQBh	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1644978.195452	CzCSu33vr76MUDj9U3	192.168.1.122	56344	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJ8cWoth5GUcnTPw6	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1645142.516261	CNqQfW1Aw0mpXc6927	192.168.1.122	56345	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiMDZH2lstAp3OdeI1,Ftag9vhmGvySrJX27	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1645727.216458	CJTjvA29wr3sDf2g1	192.168.1.122	56346	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbSVQJBFdvTdjhYl8,Fe1IDE1O1Qw9LRKrv6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1646022.692083	Cyax3v2cm25F0Q0VLf	192.168.1.122	56348	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmVmfE16UdjAi7Uon	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1646155.768594	CpLvDT2NtFsBHWUoj2	192.168.1.122	56349	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FvfpwC2uQB1l34jm9i	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1646284.087252	CiJXLv2HcPU7adnLce	192.168.1.122	56350	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOXics3zMGt1W96G51,FWAAU9D7CG277BEil	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1646940.781376	Cf5hlA2FppPUkTKMwg	192.168.1.122	56351	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FO1c374Y8ChojJv1Xh,F8ECSs3B5iTOWJ0687	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1647241.550668	CxfDVA4SPcKP7ucx4	192.168.1.122	56353	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrhJM04zE0FK23QSmd	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1647419.685744	CdPXp7cwgGEvYCCYe	192.168.1.122	56354	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8H7vf1x21buuB6VIf	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1647567.002284	C9lPF6rsstzwVgEGh	192.168.1.122	56355	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHdkng41U7h5HNIeb8,FYSAMC1wnE6X1lZq2b	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1648211.688868	C5jg3o2QA6pjGsGvt5	192.168.1.122	56356	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPKIg82Xn6YQsaObH1,Fyi8n81hHPecAPt3Xk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1648512.463167	CT3bdZ3a05ENhrz5y9	192.168.1.122	56358	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpwtoMjtt3sEbIELe	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1648683.523532	CJBY494p3vBjH1nw8f	192.168.1.122	56359	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2TOHc3zk3LXUQTZj1	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1648840.843099	Ca7T3n2WFn55Q0jez	192.168.1.122	56360	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDewAoafcOTYuJrya,Flnua6fEAYAtiluf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1649418.544265	C1CdtM3v0MxDJeEoxf	192.168.1.122	56361	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgUiFWSG1RNPUhuMg,FLMs661aAWT6CG7YW7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1649712.313382	CCy6Ex4kzTcA0cuw84	192.168.1.122	56363	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FK0gh514CJRXa25kej	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1649885.370995	C8e8xS3iet1npIZew9	192.168.1.122	56364	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3dCrp2KZu1eJXzQXc	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1650032.686712	CaTn7l1QQzO4yT3WE9	192.168.1.122	56365	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyrixoXCx7SlhUzl6,FkHK0o4BXUTT9Pg2U3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1650595.375189	CDsSOH25xytVkro6di	192.168.1.122	56366	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDezkj4e4lXIaNzyFb,FvXELwE4IamLJmbob	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1650885.122786	C3OFJ43lkdusm2xdi7	192.168.1.122	56368	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDBZlc3buX9ZIY5oia	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1651022.185338	CpphGo28Cz96HGFjMc	192.168.1.122	56369	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fz3asy1NT2J1pbd4I7	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1651148.501094	CRx1gh4GbMSe78qFDe	192.168.1.122	56370	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrK7ij2GncIPOEG26a,FWObhY1FOhrkAywEd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1651784.175659	CknJ4218X5tauuWntc	192.168.1.122	56371	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSo5iU2rOWDwLUp3C8,FUNw8Z29yJUnybr326	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1652090.660550	CCrwGDT7swp6AMZp8	192.168.1.122	56373	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhBqKl2zNaaHXr5158	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1652252.734218	Cnw4gJ2h7pp7YhjaQh	192.168.1.122	56374	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIbco84X1bGZTBiqM	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1652426.078264	CEbpbT2IiCCJPu79gj	192.168.1.122	56375	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FV9ReP1bHnCaFXg5d5,Ff0f0b3Gf2Fp2ur9l9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1653082.752294	C0hY0Z29aJwTYXpJY4	192.168.1.122	56376	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsL1yl4Y49TBPCFrx8,FlEguU2JDkejNYWHy7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1653405.537322	CPKvEE3ewhVCVBWAjg	192.168.1.122	56378	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdhCgL25EeoVXPSGXg	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1653545.613222	CC5fKM1jAA3uB3nni6	192.168.1.122	56379	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fgns0B1JyZb2weJ34f	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1653707.931671	CjFGMY3wMjBYnd6Jjh	192.168.1.122	56380	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwOHxB3SBh0YOxbYbg,FdtueI3LBVAPYKSjhf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1654297.618755	CqBaI13cT4ou6SU5Va	192.168.1.122	56381	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfD65k4RHtgULL9Yrf,F4z1Iw4qQLyeX1yON1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1654621.420468	CjPwBm1kakRF0ihTy9	192.168.1.122	56383	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDCw9s1VEGOLvFHnDh	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1654793.497846	CnsG7Q3jKP5tx5AHgk	192.168.1.122	56384	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3UXux4u6GEcFhLB5c	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1654944.819397	Cf2IiD1wzDt86WLeAd	192.168.1.122	56385	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtytJJ3srEnPOfblhf,FWJ3mSEGtzE7GRae2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1655551.501613	Cln3J21j5oVI58sE7l	192.168.1.122	56386	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FW5vRu3qhbtfLH5s76,FiB4v92sKSuEhxv2od	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1655853.257327	ChO7UQ2fL7KMOHqaqh	192.168.1.122	56388	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fsv1D61pxGLaWmNure	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1655991.310031	Cfq2ad1Em2ZAhrg5wh	192.168.1.122	56389	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLjzDaUkgJQXWpjF3	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1656111.626974	CxEzh7g9m6wxQSVli	192.168.1.122	56390	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAL1fl3CruzlmfXkY,FEtsc8iW8bwhxfot3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1656740.310804	C5xMXV3BqLmcVFWYWj	192.168.1.122	56391	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fvhfgw6TYov41dbe,FAQR754b4kzGDvJZwa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1657014.092689	CL0chd1OTMAqXjO5Yg	192.168.1.122	56393	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUZYVU3nQGax6zic1i	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1657160.160329	Cq2Dtw2hxHx7hMHSHk	192.168.1.122	56394	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtHWER3W5obMXSC548	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1657288.489345	CFr7gB4KZ8Bbv9Iih5	192.168.1.122	56395	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpqHMl44mREUjC1fyd,Fvck5w4IkW3OlabXJ6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1657931.163422	Ckic1A4BINuSOeoQO8	192.168.1.122	56396	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoS3cQ3kaOruIDdVu2,FHC8DD2wFWB2qYn2I	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1658282.646014	CcpePV2usfJW6hWXcg	192.168.1.122	56398	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FuL7Yy3zDypTHRYLck	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1658453.729757	CP5UWy1tw1127gHXLh	192.168.1.122	56399	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmBk0G1Oacsc0Kp2j7	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1658594.046374	CelZJI2IXcO772cSk7	192.168.1.122	56400	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzLPFh4CkN37PPEy78,F9tou81Nb7xD9uiF36	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1659199.717215	Ckv8m33vspeJ8vG6Rc	192.168.1.122	56401	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fb7LPX3omjtRoYGcEb,F4Gflk1C6qxXBxXHnf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1659467.476808	Ct5V0N154lNecUYWCa	192.168.1.122	56403	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPu4qM39xk3DZryLy6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1659612.546449	CACe0G4cbCTTkPcu3a	192.168.1.122	56404	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fa2fl02W4Co8ZQtgl6	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1659750.869419	CwyM4NZnIUdgq8VOe	192.168.1.122	56405	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiiRqd1T6oV6vFUMBl,FnU7Xk29Q0wiJ4HyI9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1660383.549170	CIoZwe9IMCzOHJB77	192.168.1.122	56406	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEodkr3hafS2HcgPok,FpwxXM2rNR73NjcGzg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1660668.341731	C6KhVs4ZuQLXvDKcd4	192.168.1.122	56408	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlWQdm13oYdy9a3HCj	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1660803.418712	C6zcFq3lvXFU0N6z0b	192.168.1.122	56409	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FuBoAA4bhCc37hWLZ2	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1660949.743261	CpEzoZ1iyvx5VKole8	192.168.1.122	56410	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAbhMLkVE9gO1JJr6,Fm32DQ3dm3j8l80418	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1661595.431805	C3sXvZ2kA0yvLkQ1xj	192.168.1.122	56411	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIcehs40dKUs8Ugbg5,F8Ltfq31acmVGjh1uk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1661881.221453	C1e2lq4oIjfGZEwDlh	192.168.1.122	56413	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2r9d32YbKjNVxxE09	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1662022.310982	Ce3ZX51lbcjbXMJh59	192.168.1.122	56414	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrgMKP4ZKPiRMQfu4	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1662169.627085	CxrBrlCYHHJuRWSab	192.168.1.122	56415	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FO60l37Y1Su5Z0xv5,FXgmsd3vnw0sKiK0k6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1662775.307993	CWUyDz2cayB5QLuwSd	192.168.1.122	56416	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDMG9QVLJNqsGbn38,FGfahp3x62P0EnRO0l	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1663066.806507	ChYhVo2ooWdqh75dI9	192.168.1.122	56418	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fz8RM83VfX1Dp480f	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1663197.901411	Cdlydw4e740NHSGVE7	192.168.1.122	56419	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPJN6X2uI7SoRvRqoc	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1663338.216972	Cs3HNU2nXLseAF12Q6	192.168.1.122	56420	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSi3Fz4RJpfQzO8XUd,F5yPoM2L85Fw8MYJNd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1663890.902325	CB7wZ02fnatc8U2gMe	192.168.1.122	56421	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgdQy8N0MAyM6RiIg,FObbPM3J5wCaRgsap3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1664174.651478	CtV0hx2lRf8gR5STw8	192.168.1.122	56423	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzEDaJ2jt21pVMFub	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1664346.703320	CaFVoBwWGsgoIWq9h	192.168.1.122	56424	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FzSB3P2rGUyEjBu5Ah	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1664483.023263	CALeNw1Pmn2pOkpiSb	192.168.1.122	56425	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgY3yLKW4LMuouTL4,FdUL4B0hDymrwnyAg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1665060.703717	CRGQvc4vtt1H5w5jQe	192.168.1.122	56426	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FD5X0A2sVTGrfcjgGk,Fuv2nO2lwsP9q8drye	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1665380.200350	CIJEl719sZN4qVWrRk	192.168.1.122	56428	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcibGYX79rVpl5Pfa	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1665511.267258	CTkPyn3vP7VNjxTju7	192.168.1.122	56429	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4qCP6403nPto8ODTl	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1665690.589372	CTLWm120DKnagzJFAi	192.168.1.122	56430	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FffF514gDEVywvoGwe,FFIOhh2UWuuwUqY5za	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1665963.762634	C8LGo496EswG1bVq3	192.168.1.122	56431	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fot0Hz4ZSiS0cGd9M5,FAbryy31eNWFdsKgq4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1666285.528783	CU8z5t4rWKwDfJ7wfh	192.168.1.122	56433	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7S0c54p79iuokYM0a	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1666448.595088	CB8zZa99YxyldD5h9	192.168.1.122	56434	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FAQf0V2fgyAtxRecH4	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1666584.915194	CHCpEM2jALIXwkIE18	192.168.1.122	56435	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fsm6ZyoEHD3bmkrO,FP0f8Tp41f9Db46q5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1667135.587172	CyvH9h45bVCynY0hRa	192.168.1.122	56436	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fzfoc8IWJf4LXHPEg,FgKw6k4dz3JA6NzEua	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1667438.399313	CnmBEJ2Aj0s1lTtZsl	192.168.1.122	56438	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcLkQR1yHvw6TFBzmc	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1667596.495281	C51Ole3IlmFvab6nv8	192.168.1.122	56439	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNpfLwJw9SecmVs1e	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1667757.811662	C8pDDu2bHe80RQ21P4	192.168.1.122	56440	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIXDdl1aOcvZA12HXi,F7QrvaC0veVNMtLw1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1668374.488808	Ca7wFZs6Am9oQBOI4	192.168.1.122	56441	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0mrgl3VOi1QxdPJG2,FprrSO1FBFRSYQfOe4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1668665.261058	CBRg0o3tc5qoalg1K2	192.168.1.122	56443	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzzfXr3GG9koVKoif7	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1668832.312380	C2WGct42lbngx6y7u4	192.168.1.122	56444	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fa8YHv3nVmqo6gvE5g	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1669007.628984	CYUpyA3hNB6zoq43e4	192.168.1.122	56445	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fgtyg821FUZOcckfaa,F6UNaG4DzMTr9fJkth	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1669276.795531	ClIQMl32G260hMe6Ec	192.168.1.122	56446	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyNPM3Wxgj1g5BERb,Fh8dn32HavC2DRKAB5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1669557.554057	C40st43LDvR1Ojjkv1	192.168.1.122	56448	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVIMAS2NaxLZurbn6j	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1669735.600942	CBC9bT1zYWuDLF90W5	192.168.1.122	56449	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLrPbW3KK0Bk6TYqMl	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1669856.919557	CsYYjmwJoIGvjQkP3	192.168.1.122	56450	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8qfKa3aPQxrgWMfo9,FXC8ox2o1UfQAI6isg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1670107.108117	CDxx3I33j3kndQMEb2	192.168.1.122	56451	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7s1Rr4JD4tA4nYCaj,FwCbLH2Hh4OaLqz9L4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1670384.898633	CopHHn3omeZjBMzNWi	192.168.1.122	56453	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwvGkt1MuWJ6YxDYvj	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1670560.967962	Cf9pgJ1sS99RN3f0Wi	192.168.1.122	56454	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGnEaJ3yrRQM35CXTf	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1670727.300273	CawT2JwT0gjlPRPF7	192.168.1.122	56455	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0xPJC14ru3poGMXG6,FN3MOB1HRgVSgOfaXj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1671026.782688	Cnk0aJ2Ox2Cm3K7qk8	192.168.1.122	56456	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FunfEP1dxpAqeDMGc,Ff06iLjEx9OhFGEUk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1671373.529956	CzQOmT20OjvTzvBBae	192.168.1.122	56458	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fwg8z543iZrLAx2Raf	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1671498.586131	Csm0kpUIxsxnaV3w7	192.168.1.122	56459	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6X0932u7djNP0pyDa	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1671646.913216	CItcho3slNnNcQZ4z3	192.168.1.122	56460	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJnoKl1d8Nwvg3Ygl7,FW2ATg3n1IVKpOYyjk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1672280.584712	ChrhEb30EqcnJB1Neh	192.168.1.122	56461	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8hs2m4vvG1iIA2QG1,FCt5nj4bfUpbrDuKok	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1672608.373686	CuD5nb2dEotrQrkub7	192.168.1.122	56463	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fb97F517n63KuH36i	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1672738.468567	C9FMke1BVubpE71ali	192.168.1.122	56464	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FzzajMuymYGLox0Vi	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1672874.789264	CgiOO420PkGwYqSU24	192.168.1.122	56465	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhhiAj2FD317fM2fLb,FlXfRd3U50NTt1W1O	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1673124.257479	CCRG1a1nP1Ds0FhLQ8	192.168.1.122	56466	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FItb5D29AqpUGQO2qd,FyqMrf3PmyVc1cqM6c	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1673395.042261	CPBYIx44FvoA7BLLJh	192.168.1.122	56468	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBKk0jWt5Vjf5CLKc	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1673528.123617	Cy14xA1kE9X167YS6a	192.168.1.122	56469	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7mk1X3O4EMlrzDBTh	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1673667.458274	C3PUqx2GWcAAlN1gMl	192.168.1.122	56470	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6BdWO3tyXFKBy0fLg,FXf11R3DIGGgyx1r2h	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1673925.619442	Cs2VjG3vZbhqWwscI8	192.168.1.122	56471	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvxLcM2UlmTaVx0gXd,FE6ytv1oQIrXL0vkik	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1674210.409138	CaQVdx1Q2X0uWWvfX	192.168.1.122	56473	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FtxVd8bxO2aH5BVzk	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1674388.490572	CybLCabYbgP6Z2Fle	192.168.1.122	56474	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtMADk3Id89wDzgfaj	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1674515.807947	CDZHnh2rkxZjeFQrig	192.168.1.122	56475	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXP5CX2M2n1q4eGDW4,F7ygTv4f0ed83sVI61	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1675058.498980	CljYIE2Pg9YZcUEDn3	192.168.1.122	56476	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FclNFm1oOw6At078tf,FXeMIB1LnRd8a95ha	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1675311.279695	CQtWkl4X1v9VC34648	192.168.1.122	56478	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMBN5c4Cf98JHYXTfd	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1675486.429363	CJf8rH3ArPRzgZllqk	192.168.1.122	56479	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F43e1z3GUlYbWAqBq2	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1675630.751161	CPDZQ422QKelhrScmb	192.168.1.122	56480	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUYKjD27j7mnVeJqVe,F8VUMm2Rv1jgoH7dpa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1676276.429353	Crk5Z64rEISNbScaVg	192.168.1.122	56481	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FA3MV13LeanlnVZOec,F02EnS2hp0c7A1ww73	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1676625.211094	CHdKHq1JGYLdHHPQ78	192.168.1.122	56483	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwP6oT279RhL1BaPS7	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1676793.288180	CUG8Kj1rBVYocZnock	192.168.1.122	56484	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FvmkBc1jFb6SI1M544	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1676966.621740	CWUTDk2Kup89snMTKf	192.168.1.122	56485	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOrIydBxbOh94ylil,FjdV7W1qn0bjoH6bL2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1677227.097054	CsX62t3O13aI50j0Ej	192.168.1.122	56486	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fsan4W3uQPRkzZFNV3,FFpxcZGGecI9wacA6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1677504.855874	CR7u8x3GJ2sfegjLzi	192.168.1.122	56488	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3ufqX1pPV2FTbnoef	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1677637.900117	C42nSp2ED8kQh2Xtqf	192.168.1.122	56489	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHejWl45E1nhoBJuY2	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1677780.221620	CLKdi61jshRIHHtKf	192.168.1.122	56490	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjJAsEkYbJpMyP8r6,FRDg9b2QPcxN3UAkI7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1678326.907611	Crk73k3Tv2SZmVBTnb	192.168.1.122	56491	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEBjSB3gvcl3IiXba2,FY5QRC1YCC2wfqIpPj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1678607.407627	CQNnI53aeBqW1cTmnc	192.168.1.122	56493	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FiGHvA1Gar40bqG1P1	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1678772.504187	C3bXrw3RU1P6SpRND8	192.168.1.122	56494	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUkYNX2rSC1Uwgl2Ge	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1678944.826021	C3XF0h11XROCq2s8b1	192.168.1.122	56495	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWUfdM1Kp88CI6nQPe,FUxIgg2bAQgZHdm9Ug	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1679500.505023	CWOzXg23MRnRDzWxPe	192.168.1.122	56496	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEo1lZ1alzSeEGycG6,FgaFLfrzJ3EBKPQCb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1679780.283151	C3HLpgdcYUiLmgR4j	192.168.1.122	56498	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFL1672L63xgCF2Kh	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1679935.345664	C40Zx83U0scPgNQUch	192.168.1.122	56499	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FVsdZk4pORsCA3MDGg	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1680094.669270	CZu7iq4DhQMVWyFyje	192.168.1.122	56500	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FD99YI1nIwNKshnwc2,FcJR7oGjiYTdF2uM9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1680659.351286	CKr9Q7GnSlaKOVYbd	192.168.1.122	56501	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4ryS54wD6H4h0cUvd,FuOVjK1b154XB2kyYl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1680964.140182	CfW9xN1YjSLAbHpydh	192.168.1.122	56503	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJ86Jl3EIIDVREhmif	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1681138.206456	ChKcLI2xJ5zJDkUHX4	192.168.1.122	56504	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmO0xh2uwurHZ3EZX2	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1681301.534930	CSguOx2psQLPf6qkx6	192.168.1.122	56505	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwtXnB2SYtdjyMPZCg,FwwLclt6K7b6xUdq	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1681942.266797	CaLctgU0ldyzN0rsk	192.168.1.122	56506	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsJ2a7h91mxRAqk38,FHiy74G6NDJlUHEK7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1682529.243665	CY2pA71gWyEpUXyxg	192.168.1.122	56508	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fzxkto4enCl2zRegN8	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1682659.313573	C0NIfh4SmOqDayfey4	192.168.1.122	56509	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FoKdBP3rYV3Dq2DfW6	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1682821.638857	COmjEV3ocXU1jk6pS1	192.168.1.122	56510	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fdoj292S2Ler91Vk79,F0JXzb2soRVikHse45	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1683379.332319	CxLOpWDVxHlu5lIxg	192.168.1.122	56511	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpCgxG2TeRgPlgFCk6,FB8vPF2BqcL0S7btV8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1683954.310793	Cp0dAe2cDDFKBtWcK	192.168.1.122	56513	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fw0zggv7hx5MBPoKl	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1684107.412127	Ck3QcZ1bm1bsi4xze	192.168.1.122	56514	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fsfitb3lUtmmKMdpif	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1684273.746648	CRsLU4QSSm9B1gfq	192.168.1.122	56515	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuOxbH3Q3DlXpNo5mg,F4Yt5o3DVRl199DsH5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1684886.429136	CIzZzscKsPQJLdvP2	192.168.1.122	56516	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVz3BC3YYcBImtLnYb,FqTi5W3k4dP4Snedqj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1685160.215894	CDIQ5n4FG4smQvMx1f	192.168.1.122	56518	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLKGX828MH7c71BZOa	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1685310.323610	CfJx5O2oxz6xlHjG75	192.168.1.122	56519	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FY4IxF2789VpdDJTkd	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1685477.638810	ClQCXw2AAc8FynLeI	192.168.1.122	56520	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Frc8FhkBAibawpWth,FiTZlx3EuwHJdjjrQg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1686128.304372	CY9zab21PKE0lk4vuk	192.168.1.122	56521	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2wMUX1zlPmB4KCCC5,F6EXT32zVzlc8pVvSa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1686434.822487	CdPIvZ2LpRJW07oR01	192.168.1.122	56523	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FvAGip3ZMpfdKjnMLi	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1686581.962274	CvQcuC4yYfimQUMbJ9	192.168.1.122	56524	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKMHCvF2kvpbpyUTh	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1686728.296117	CJ8s4SjwNKNQtDsAe	192.168.1.122	56525	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTrQ4l3vIkXYkd2b12,F9I1dO2fgqndK9lwj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1687346.976598	CVn7864r8Phnjq5WR4	192.168.1.122	56526	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2coIu1pDz0y2VbwB1,FcOZPLcSxaIglMu8c	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1687648.446275	CIr91L2mGErtIhWih	192.168.1.122	56528	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F175ix35ZBiH99WSPe	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1687788.497223	ChbllEl3ebwzCh7e8	192.168.1.122	56529	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHBK4j1MWPutdsOFik	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1687917.827169	CTxJbd26kKESKuLwj8	192.168.1.122	56530	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvH1pRAD4MyvLHqr9,FLigcf4ItHj3ocgeE4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1688491.501996	COdOVZ3WrkOe7Ew5zl	192.168.1.122	56531	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FubSTt3ltU1RnIqdil,FFzr3N2RDmFP2Xio03	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1688809.298956	ChPAPCEdqxueNtgRh	192.168.1.122	56533	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FOgbsemfJPI4iBXg	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1688943.367458	CCB4DdU2PbQ8y809e	192.168.1.122	56534	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FeNDqz3kl5KgL937hc	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1689092.696858	C8kZiy3G4Nlqc7Gr64	192.168.1.122	56535	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8MUKh2PUSrExX3U91,FHUm2p3YcRWwWqEiwg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1689690.376333	CXqVqOcMICC7XHt87	192.168.1.122	56536	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fqqliv2XtW3ANQLKB5,F9GXwj2ttrZRhBUgh4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1690009.863565	CMhozf31ECEJyy6jgj	192.168.1.122	56538	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnMebD1SmBFOOft72k	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1690149.962063	CfcnpB26F8jWjosEcb	192.168.1.122	56539	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2YjoR2bhRDb9mP9N8	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1690320.281346	CRx5xc3sCuufyvt0R7	192.168.1.122	56540	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTCoQk19LOs5PmYI8h,F4BpeV1snej5n6MMGi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1690916.959672	C4St5n3G9VFiDb0RD1	192.168.1.122	56541	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVlHOCZA6gTM0yAB9,FQK7ts2LaRsx6Jvlne	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1691234.742381	CebvNb7y9X7XRFqXc	192.168.1.122	56543	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIdszU1F1RoDwYw2S5	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1691404.826185	CNha1114UJE4OhlKgk	192.168.1.122	56544	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6OJC1Jkxh3Z7vyKg	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1691553.144206	CuHKyi3u0P4VtpxB9b	192.168.1.122	56545	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3ZhCB4z97JGTwPZma,F9iJno4cVBku4S76v4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1691908.304681	Cuo00UFOYrjU85VDb	192.168.1.122	56546	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHGwXh2RvqmXD75KA9,F2sP9r3Ov3M4YxdbY7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1692231.091360	CAjNrx412ndFt5aAtj	192.168.1.122	56548	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKOrn94zBudCZRKILc	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1692355.162846	CLUyjJSriUNGlip6h	192.168.1.122	56549	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7Q3Tt2eyc6GWiJpB1	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1692503.490523	CC7iFaEaKIMFsLxg	192.168.1.122	56550	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGpR06KYcXzKHSzWi,FOvbrY2YWVLSk0pl88	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1692862.666834	CdACpo3XGrDSJVAd9i	192.168.1.122	56551	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4xOXU96xNv4yRIw1,Fop2b643s7niF63Ywl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1693157.451478	CpAYsb4Z9aI4iLIJDf	192.168.1.122	56553	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbiNf587TEei1LYI4	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1693281.544838	CRBVX73T3TcvFApCU8	192.168.1.122	56554	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FeUNAJ3DAlUGmdPjD2	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1693439.866546	C6RSnV6arKmpHjQ8f	192.168.1.122	56555	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGxXIA5cpAOBJurld,FEM4Ph29qXqS2dQfj5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1694056.533283	CoqsB04ZTS4KPm9W73	192.168.1.122	56556	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqVDzx0JjUBqtshMf,FGhlka1klxcDz7J7I	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1694357.305360	CimqL64f2HfgL6oAtk	192.168.1.122	56558	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FjsCpq4KgJ3pzrZuC9	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1694514.347580	CFq3VL22Weuu5OrTng	192.168.1.122	56559	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FCK2Ow1S0J5SToI9Oj	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1694688.672425	CkyvNx2SOZIxBkq0Jj	192.168.1.122	56560	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0lze52F95kAHc52i6,FuiGA54U2Dws6SuGi7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1694977.858074	CNkXja21FtSSJRWYid	192.168.1.122	56561	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7WNp73Wbe3zQLkoW,FyUHf13r8Yof5ZNBUa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1695289.648223	C1pdy14vj9fDJI5hS8	192.168.1.122	56563	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fr53bk1Hz1jgVk8OCb	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1695434.730282	CufqSE2Jlnc6cnFwH8	192.168.1.122	56564	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7Qoki1OdnzfpRuh7h	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1695564.060675	CaZ8QBDnnFsTfREe3	192.168.1.122	56565	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJccuotLGSSqaIJx5,FKPLmV3dWPzqAhA91h	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1696136.744229	Cj9XT220skDn0wso6i	192.168.1.122	56566	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDDZWFBE1hF4Z57Sa,FRBiOY4rbOCckZVL8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1696413.524460	CJOw9V3yaTMDC8yVzb	192.168.1.122	56568	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8X9Dx35gloF9KjB8e	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1696556.613506	CSU6Pe253iJVSCzMWf	192.168.1.122	56569	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FFMmLH2DE7xWJplyxa	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1696720.934507	ChklCi3pQq7TxXoSy4	192.168.1.122	56570	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhUPSZKPkizWXZvj5,FxuAqmhFFBYJn3C15	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1697321.607510	Cws8RLjGWP05S5Ut9	192.168.1.122	56571	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1Kf0H2b1z7Ow9Nx5j,FmnhEs4BlOGuqW8VE2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1697657.073787	CSGg2X2FpDMBYbac8a	192.168.1.122	56573	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFAXwI2T7wYgGsFNeb	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1697790.127002	CW4Etl1fAxQbayOhSi	192.168.1.122	56574	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhslRr2wWDUH0Yby47	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1697964.452336	CAxaJK17JaF9a9pyM5	192.168.1.122	56575	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQyxhB4KG1s7lshjZ4,FAs4Ss4IvYvxcwovB	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1698237.614620	CuAC1N3QXX4aLtXzpl	192.168.1.122	56576	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUORCz3iO1x0sbeW9i,F8klMs2I3vgjRlMu7j	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1698547.386617	C5ShWb4hh8AZ2QQCB4	192.168.1.122	56578	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fv1A3M2eFOVIHmik8	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1698681.448500	CptNfEgoIW9JDHcEg	192.168.1.122	56579	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5GFwk2khXU3vic0Xa	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1698801.806216	CadO7d4JU9F4Ou16Ni	192.168.1.122	56580	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fwq3Id4CMdH75ARks3,Fc3Ser41ApI4bbn677	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1699451.470484	CuwLud1JIJmLauCT5f	192.168.1.122	56581	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIyVUL22iPfgOtN0h8,FD7OXw2Q7L7y1j9G2j	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1699704.270133	CQ95MK1Lycd5WMeyY1	192.168.1.122	56583	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fl6rfb1k4CjTAwdRja	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1699848.356378	CG2USC2Qg4m84zIgck	192.168.1.122	56584	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtxWMW2h6FfYdcQaCe	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1699978.097478	C8A29h7QWxkXvn008	192.168.1.122	56585	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FY0Pd23jrK444j6Azh,FWfYWr7lYXYbJiES5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1700524.773235	CITRzK1p8MmphMsVM3	192.168.1.122	56586	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcqwgJ1fxFqUvlgvVd,FE9oNO1spRIMuZziX1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1700822.556745	CulmxGdVvbaXhItSl	192.168.1.122	56588	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGFGhS1iOquepGsMRf	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1700976.618274	C9AouU3rtO1mL0P9n3	192.168.1.122	56589	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGtm7z7x9KpSu2Mv9	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1701127.980429	CP9TrM3cIYdiQ9HJg6	192.168.1.122	56590	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDImFk1Nxj28hqqIo6,F9UTrP1c7aFQMkg25	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1701687.675207	CWviKy1gcHod8OGCQ5	192.168.1.122	56591	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZ933V2mB5XJUNivA6,FytXHl1PCeuJSUSHTc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1701993.147842	C2Pd7E3iJlk9wnSrze	192.168.1.122	56593	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7o0uJ3eOvtYr4mEK5	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1702160.190713	CVosoG3TRy4SvV2D73	192.168.1.122	56594	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDTBpn4fYYDC58U2r9	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1702301.511425	CkWuIvieLT0AdlUUf	192.168.1.122	56595	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfzIAk7MBhUotZiw1,FsA7Nb26JY2Ekmafyf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1702894.189945	C7ITX82ZE7p1FgpE91	192.168.1.122	56596	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fn4Wpo35QWcAHHhkcb,F1c6cJ34tehQpmr2R3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1703171.967292	CEyD8c0DGcajxVwn3	192.168.1.122	56598	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FOAqS51badXWvrVPj8	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1703304.034888	Cd4x4L1q86GmXQHz4a	192.168.1.122	56599	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZotUMEWqdmiVv0bd	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1703472.351070	CAvxDHpm6ANTfhum3	192.168.1.122	56600	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLXf1u4OKPcSwK1XFb,FjtpJW1DelfwuMXgvh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1703716.512843	Cg7pyK31tTOV9O1mPe	192.168.1.122	56601	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fa8Mem2U9rTmgeXhx1,FYJjVT353h2zUp1AG4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1704345.478952	CLlMB64Z7x3OAfnQ9i	192.168.1.122	56603	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdkQt11g8RtCTrmksg	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1704502.529110	Cmp20i2nwjwisdmYX9	192.168.1.122	56604	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMtVYA4575Gk8TDBji	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1704679.555705	CI9jeVlqL9doaFZq2	192.168.1.122	56605	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSFfV72AjkTqMnaWcl,FiVb1a3ESDFaG5BPOd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1705319.227223	CHyv8PeMaF4ziNDSl	192.168.1.122	56606	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FThdrj4CIlxVQqSaU8,Fj4shm49sWqq3B7qSj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1705613.977497	CQKV9D4tXsob1AbeW6	192.168.1.122	56608	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fw6TBw2x5Xk7u8CxY5	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1705735.040055	CIkpo5PayWR0CIPJc	192.168.1.122	56609	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FnZBPMqjrBBIClFWb	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1705881.364805	Ci0lsG1l4IXcZOp4Bg	192.168.1.122	56610	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqCnWx2RHFSY1uUSo1,FwkRQd4VyJeEE69MB4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1706456.031009	CLkJqo36SP0pJazvLe	192.168.1.122	56611	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcZ6L74wAhq5LXy0S3,FlnGD428aNm03VeQV8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1706762.484103	Cim0ys4DGJOcF2llJk	192.168.1.122	56613	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIs5kL20gr2JIybau6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1706898.532989	CmNb6C35HfGl9nXiOe	192.168.1.122	56614	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FAiAeunO754Eaiqrl	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1707022.866462	C1iSC22GzRopCY3yg6	192.168.1.122	56615	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7ic9z2KpU1k11I6s3,Fndxwf4ycK2yKPF7gf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1707272.044214	CpNqHH2fMiemAi7CJb	192.168.1.122	56616	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeIV9x23uuOhywR8L6,FX2xxO38Qt0wuSY0Sk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1707570.821540	Cl4jJi3DdpFXye4Poa	192.168.1.122	56618	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRUOrd3JHvHX7HUuz6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1707748.905883	CvyGPD27vxID4MVwPk	192.168.1.122	56619	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FAXfbE4Sq8AzgZEZ9a	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1707910.221801	CjN7FDO4iRayHtLM8	192.168.1.122	56620	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdLfaCfiSCsY1VHtj,FURuHh3E8xFglKGuA5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1708514.901254	CWzvU8zqfFwmg1fUf	192.168.1.122	56621	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTdMIF2pPY4q53rPfh,Fgbo0q3bfwpX8uTvrj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1708808.684638	CY6fUF1yY1sarp1hlk	192.168.1.122	56623	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVmq9rZKzkomqAtA5	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1708978.784391	CC7XTq2z4ZPS5Zb8Al	192.168.1.122	56624	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWh8UX2lfFbrR6iZU2	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1709137.115961	Ccet3g3zmDTZdpWrL2	192.168.1.122	56625	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJ8IxG2kiFwrhcLPg,FlPL573uMpbZWZ3yEg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1709684.793239	C8BWddLiRH8mqPbh4	192.168.1.122	56626	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvyWyf3QQwEnpP6Xid,FfFZcY278NL1Z7mPkd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1709967.582683	CVJW672yjFsfl8VrEa	192.168.1.122	56628	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fwob6h4c4TWnpZ7669	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1710132.963299	CpY6dE2MjxXyoQdlS6	192.168.1.122	56629	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FFZRCX1CGZG9RNP1Vg	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1710289.282286	CfGNqUVmGJ2cvmkZ1	192.168.1.122	56630	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEDSrq2neEpw4H2Je1,FFAH1y2geT6eDpjJNj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1710829.959823	C2QslE4rpxJVM7h62e	192.168.1.122	56631	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1MhmaxpoRG0n0l22,FV8NWv3bLaOFTwIj6i	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1711087.742515	CoOH6VhGqgozXz381	192.168.1.122	56633	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbJBpK1nA0ikpOizvb	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1711257.801154	CTssl91hM5Y6rDhDce	192.168.1.122	56634	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMhZ8w19djuWE8JaCe	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1711393.129542	CoJZGW1RM5ZV75jNZi	192.168.1.122	56635	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8v1zi1bFdMRNKzUHh,FFifTM366OiDnIlNz2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1712011.798977	CEMWWb814Aaihsvgh	192.168.1.122	56636	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F35elN1JI78wTVmij,FZ6MQwomP9AY4wIUa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1712308.550218	CMW1hP3vWliPUW27O8	192.168.1.122	56638	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8iCW5i2qBA4iMBy1	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1712484.595820	ClQu3TbWFiy4oEQM7	192.168.1.122	56639	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fa5sSp3PEPQDyUPqgd	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1712639.922039	CHZcGm13ICC0c4O793	192.168.1.122	56640	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpWo7p0sW95pu1Mc5,FFCzKI2ufl5cn0WKR	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1713250.600267	C2AvkA3a7Ccevot0Qc	192.168.1.122	56641	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FR1QTn1fjdvR2ER2j5,FZtHd43l6e4zIDd9O5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1713538.093513	CgJlu43CbnrLL6VGAk	192.168.1.122	56643	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdxbBv134IG6e8IUxf	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1713684.219301	CXpUnP3MoRFQcKFDHg	192.168.1.122	56644	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0X3ed2cQZyjfF15cl	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1713862.550399	CCjB2p469HpmIIJrJ8	192.168.1.122	56645	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FN0piiY1xTWyoFNp,FUFG6u4xbkqAJjaQ6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1714469.232248	COTwf02OM10Yn9l9nf	192.168.1.122	56646	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4Z9Sg1jgeGfK6113h,F9bQQCPQmztZLxFnc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1714793.727954	CVNRG04FQR4sWyIaVl	192.168.1.122	56648	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FOxDpkuBjFLnWrZJ6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1714963.829780	CgtIpA1GWWY2BB2sOg	192.168.1.122	56649	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGewDr34yEoiGzw6o1	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1715089.153490	C9EDGq2rZfNSxwvIOl	192.168.1.122	56650	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmhYvG3vjatElrQF4,FmvvUE4VY3wMR1JEul	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1715631.833831	C2FXEN2eYnOygEMigj	192.168.1.122	56651	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyhCIO3qHJuVovXt3a,FskAbmix0OMsAkp1d	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1715930.594324	CJlSfz4fX8f8qjzjZe	192.168.1.122	56653	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5gaSX3t1ockyet8q7	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1716058.673022	Cpikcki4gOAbbuyXb	192.168.1.122	56654	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fi1rLUm14DT5D0Wvb	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1716184.017849	CL8W724vltveRMU7Oi	192.168.1.122	56655	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fxy6Ng2z1R1PkC9Wq2,F2FrY04rZF6yMSJTLl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1716841.693343	CJp4T245XdTLJO2yT4	192.168.1.122	56656	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMY0lQ1wBqfXik9cL2,FcD8GC3pXjjFh9zD1l	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1717160.461956	CioMDN1SNwZwr40K6d	192.168.1.122	56658	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FkhqcB34Lby3ERRYy5	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1717318.544687	C52GHd2qIPFYckg1o3	192.168.1.122	56659	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZqOUU28WPPKWD6Db7	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1717464.880014	CydLS02AxE3cJq6TY2	192.168.1.122	56660	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRUwEy337Aw3YQTLa9,FVa69E3KPO5k3Ya52l	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1718034.559653	CEWABZ39gpNwuCTf3d	192.168.1.122	56661	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4jWdS3ooq1DdcMwOg,FrA23t3GSL5VOb6WN4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1718349.044889	CJavClZrpmk3eLked	192.168.1.122	56663	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZXvfR2VDSKi9tiGcf	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1718487.124993	CWWKGQ3gdEuDFVGggj	192.168.1.122	56664	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FpSn2e3eFa42vrk7ab	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1718662.451265	CgyKA24FvNcY5T1V0j	192.168.1.122	56665	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhrYk34VAhiHbVZMOk,FplmLE4uxAe11JEM2h	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1719251.127580	CmpUmY3PMWDTRGh63j	192.168.1.122	56666	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhjFP04LM0BPHYxFuf,FsyBK14LWtDJlP8M4b	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1719553.901218	CqAN8hYKCprfM35o7	192.168.1.122	56668	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLBZPCPvrKvlCcvXd	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1719693.979935	CQhfH84Y05mMkBBTjf	192.168.1.122	56669	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FvM7ux4eLsMuUj4Joj	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1719855.296021	CYErV16iobTvHDY5g	192.168.1.122	56670	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fbwe7OHLm9kYa4Z76,FcnYC022NvzBPPx4E4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1720200.762894	CtsP5n4ErVgC7vcI77	192.168.1.122	56671	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQDm7haJipi2DguU2,FxkAvA3U3icReMMUc8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1720505.533177	Cq7QEy3WhfQ3DeeuCi	192.168.1.122	56673	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1Kk4eRvXumerUu3g	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1720673.588286	Ch07RX3iiRSvVQIXcf	192.168.1.122	56674	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fum644oe5fxZuOAdf	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1720848.914790	CNiM9d2S9YxBBqjLC	192.168.1.122	56675	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fuoi1l4z0amddpU8G,FGi24jSDAzJX7NFV2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1721422.589622	C4RfKb179PgwsiGD8	192.168.1.122	56676	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4wDcrEQpW15PpIV9,F8FuhCC1NVZUieE8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1721703.368315	CIidRd3W5lOu8bhNeb	192.168.1.122	56678	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQsjyWsDRikDdARm2	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1721880.443549	Cv5hog29GCHxFLh0W6	192.168.1.122	56679	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUONpa4QtxGEJmGNYa	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1722009.773967	CwPTPr2K005AU4hdNh	192.168.1.122	56680	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7Oa4GTANbwbFIG85,FMLaUA2NOsCAGOQXmf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1722629.455164	CX1Zqk3RaXhNoa7zTa	192.168.1.122	56681	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCnr2lEnc74x3etLa,Fpfsn81yq2b0Purnw5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1722928.925012	CjF5N52lTvZrZwtkZ7	192.168.1.122	56683	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FeV2mC35TMqnk3jJp9	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1723090.974540	CZ3nc74HM4RpLAj188	192.168.1.122	56684	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhGbkj2kmSp9gQhWuj	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1723228.305874	C0kTrc2ParVSbu0q6d	192.168.1.122	56685	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2gPRE20n0SzTL8p3d,FjVzT93HdtrHiZ7wXb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1723468.771634	CtEB4F2PZgVee8Qam2	192.168.1.122	56686	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F38j6m4HVPOEL1Xg7l,FMwhO2d6PjCxmPWf8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1723792.552329	C3ZrFf4aEpH9N3twn9	192.168.1.122	56688	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fj3GNw2zwZMKpJOmv1	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1723959.603349	CE9cqn2dkAqZG54agg	192.168.1.122	56689	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FzEpgZ20OAq4c8pzy7	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1724132.926397	CAdFE43nVHd8jF5Rm	192.168.1.122	56690	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fd64w81e4x8DXdUOG,F5H1Zy3Es73Q6nvIE1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1724790.602455	CUWWhT8tFTXyevKnd	192.168.1.122	56691	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMOHlx3ux0NedPBIh5,FKRBsx3oLBu70drVkd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1725048.365469	C2avTp3cglAxcdR5Ld	192.168.1.122	56693	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FvCktj31VXmSjMQer6	(empty)	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	CN=7Uaterecitino.bingo,OU=then Twa-ind 1Cofti,O=Ovienempl SA,L=Vienna,ST=wicat6,C=AT	-	-	self signed certificate	Malicious	CC
1725195.449880	C5XL2J2Rv5fvaL4Qi3	192.168.1.122	56694	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6PIq416HFauYPSrib	(empty)	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	CN=Athelipet.ruhr,O=Thilee Corporation,L=Lima,ST=Blene tunde2 ttiblur1,C=PE	-	-	self signed certificate	Malicious	CC
1725371.777645	CpBbtCMdD10g1o2Fc	192.168.1.122	56695	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8Cyop2yvSCScqw5ye,F2ZaiDQ7HZ0jBW2G5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1725959.453128	Cavcem4ms4u1GNjTWi	192.168.1.122	56696	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fcyz5n2z5B37VrpTq5,FAxufT16bJO2ozSt5d	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1726230.230512	CDwUw1Rr8zAzstCcd	192.168.1.122	56698	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FaDty52QswPzWIspUc	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1726372.352092	ClsAUn3haBTO1XKUm1	192.168.1.122	56699	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfPzb44Wg4i1axZv0c	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1726533.668310	Cw8P7p2A8rqhWdxAHk	192.168.1.122	56700	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2S36F1vQJzT3zMIHe,FJW9rBgs8slEpgRz1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1727102.355121	CmVYthmFpVYVdQyWj	192.168.1.122	56701	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FL2wjAkN7JSO7VtVj,Fuoo7G2YR0hZ5BTz04	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1727378.841469	C3zJ0e4ZlBoa18sRti	192.168.1.122	56703	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnbyUT1ImDjCgMIC4j	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1727536.926532	CDjS4m4P3oYPmu6c77	192.168.1.122	56704	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQystmXM6TeNQkLT4	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1727671.243806	CY2BZf2DoFpfARaHn3	192.168.1.122	56705	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLwXvQSuCwAyRZMm9,FckIg24KVNA6LvSPG7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1727938.437806	CJSewh33oSWldSyal2	192.168.1.122	56706	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrsKThyZmfaJj4Ae2,FWHsxQ3jq8vmrA4sDi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1728207.230199	CvKzUYb6dfQJ6e3z4	192.168.1.122	56708	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FtoQJy3Ibv9k4oSbv1	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1728354.331611	ChaMQz4VyODhotFFg7	192.168.1.122	56709	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3UwuLOE55oQoSOg	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1728510.650756	CD0d0n1z16fNhdUM3h	192.168.1.122	56710	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYIujB1bAa1hMbZKq6,FfLYGJ16d0VLoqwGdh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1729066.339480	CMxDMJ1rITeLBn8CGi	192.168.1.122	56711	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fkj1UIrHtqc6bqCY2,FIotNvBK0al9WSS6b	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1729422.104931	CWR1ElMnK3q5d3QYg	192.168.1.122	56713	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPNLNv2MziD9nPxlM9	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1729565.173233	CtyeWP37pUW3GqAKv4	192.168.1.122	56714	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIEyqE4WV8vZDObQSi	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1729697.507442	CgyaiI3aofnxQv5fY6	192.168.1.122	56715	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4isob3kOkdVXbd4w3,Fabqdr1tKAdsqMvp93	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1729951.692457	CDUomYwobElqQ21wb	192.168.1.122	56716	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzkggK3mAJmdNwRc2a,FttNw6Y7pJxHEVTR9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1730229.466530	CP2KUNt5qGvZkGafb	192.168.1.122	56718	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVuOD515qAn5fRk27e	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1730390.549521	CAw6yi35tkztSibeXj	192.168.1.122	56719	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fu7sXV2vp5zN8VLsec	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1730518.868714	C3E9icQ5PJUvYixd2	192.168.1.122	56720	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIGIGO1Ug7tI1LCN0h,FJdkZG3Cy7rMoPG1p6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1731167.552168	ClUsqJ147jv6bJK7b6	192.168.1.122	56721	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fc0cyc4P6kuzqyLV1h,FTonBb1iSoswBhh1Qf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1731473.013327	CfG9gG48ZlgTlF4ol4	192.168.1.122	56723	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2SWMeXKcu9Yc3D8f	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1731632.074334	CowYm9lRZ2tGDtkoj	192.168.1.122	56724	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FzQQWr4by2XRTE2Jr4	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1731762.395856	CLjlHr4UOssMaVcbSd	192.168.1.122	56725	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9pGkB4r5eKP050H78,F0GtkyDyemsdUm4Fh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1732379.092639	CNiZpT3ghi80MZoFwl	192.168.1.122	56726	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQrJq52kArBBhjay6d,FjuGt62x7hSrBOLXJh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1732647.555323	CsvIoJ3nhPTHTHDHAj	192.168.1.122	56728	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZIDIN2xDfTE5xQXf2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1732769.584397	CGIiJpqJcIlASni8c	192.168.1.122	56729	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWcI7G4WbBk7GikE6g	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1732893.912602	CK1Vsi2WDzVyg3B1mb	192.168.1.122	56730	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fqc2ig3rNaXTBwEBt1,FEB5Vi4DPq2gA1pY4b	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1733528.605569	C5dmifLCChRv19lPf	192.168.1.122	56731	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDvuIAfXDBWFZT4N6,FNk7QE326bTrsqcD68	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1733811.383606	CLkKVq1RscDBFbipGe	192.168.1.122	56733	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fd9WVm1XsTDotg2sJ	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1733977.466535	COYBKx227zwOZyB6W	192.168.1.122	56734	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Feryrt3Lc7vQTllqHb	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1734136.790093	CWNg8gPK4JcPV5cFj	192.168.1.122	56735	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQpzPu46sa64gUjo06,FkLqJt1mr9PdxnmwQd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1734467.985837	C9EPtX1y4ypDP0Yy7	192.168.1.122	56736	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDQc4Z1gaRt5YytFJ,FMRGNL32pWHtvTFayl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1734774.760592	CdFClQ32cc2Ba3ldd3	192.168.1.122	56738	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPJ4Ah1p0r1QJc7Et6	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1734930.826950	CNNB6L3RbDBJm5sFJg	192.168.1.122	56739	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FVkERO3LuIs6D79iak	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1735055.150217	CvWK5c42dyXZjCepVf	192.168.1.122	56740	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpBpFUE94ZkBN2URl,FbJZFeUUBX5EQWFr2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1735649.845319	CvfI1j3Fm7QM5ljtOf	192.168.1.122	56741	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrTMQBHssstaqdjT7,Fg3ZFU3kA29h53Ma08	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1735946.637032	CeMjff4zuIpQDuP54a	192.168.1.122	56743	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FvnP6R3SUzKqC2R1A9	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1736069.715484	Ctfe3T3c7E8JjLrE36	192.168.1.122	56744	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5P5OaTsfSGRwmpl1	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1736217.090808	C61zVjemUBzrTnuwg	192.168.1.122	56745	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCohwaiDC1uKIDemb,F8o2IX2RU5yHpeBYSg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1736829.782242	CGHXsul66q4oYP7D	192.168.1.122	56746	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7zjHCa9hhjglX8nc,FzlB5L2QyTIe20DBQk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1737150.570212	C0Yfra4sFB6hRuxAA	192.168.1.122	56748	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJi3vK24Tv6YnADmwd	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1737288.657280	Czbqy13KD2gsphxhaj	192.168.1.122	56749	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FbxliC2SDITX6NRGxe	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1737456.983652	C70eJH3VjooVNyUmx5	192.168.1.122	56750	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ft1dRR3mYRmeh0RZG4,F58VwFPSK5dMGj8S3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1738027.684250	CQxAfFWwfJRlQkaa1	192.168.1.122	56751	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxXFzOH0B1otPpSa1,FB0S9E1USy1tLKKSR9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1738334.450807	C3D9eC2bQgJGJET1D9	192.168.1.122	56753	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgMaCNuH4Kpw2TH89	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1738497.505922	CyIe9VDCzrcpcwFv2	192.168.1.122	56754	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FftuTY3oTTnPlqHUs4	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1738668.845611	CXmrh24BKndUGD1dPk	192.168.1.122	56755	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFdmSt4E4eLSefS7D7,FhQNh01tHj8voR80Ba	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1739268.528891	ClDyBh3NzUpCabvqJc	192.168.1.122	56756	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLuR1C3cvMVbrW62e8,FA1wqx3r88sLD7DfC1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1739515.304590	CiumRP12YUlRcD2Pph	192.168.1.122	56758	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPOjjh1JMShO5ABscc	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1739676.420555	CZR5b73XWK9AMKxDjg	192.168.1.122	56759	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FsER1A8EdiYOIpVgf	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1739846.739658	CEjR3i18SBCKBBNiVk	192.168.1.122	56760	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUOX234eupEiyWko53,FcsYqhXYbnNytDAb6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1740431.430054	CkhoWT1shVPHJlbLli	192.168.1.122	56761	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFbFMe4Lo9IuwmTwZ6,F9gjEr3xgfpcL5cLf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1740763.240625	Cit2ng4XQW8XaDV734	192.168.1.122	56763	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHrWZd2S3HtFcDZPab	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1740903.364614	C56LO41geGh0btxuzj	192.168.1.122	56764	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fgd7st3SApcwCofOfl	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1741032.684878	CI2ukh30ftWOq7YSB5	192.168.1.122	56765	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlXx9J2b677W6fds4,FjHUR23AozxgEZSuOb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1741668.378497	CS9rOG3jdMSGJqfaaj	192.168.1.122	56766	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYihH2xaKGRwbiRX5,FxEMUk4S52wf9IyIT9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1741972.161448	C4JuJr4vzstJHjZ5T9	192.168.1.122	56768	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FEHJNz1tIwO9vXuo7i	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1742106.224084	CQ9ofA1SDUXd66WI9	192.168.1.122	56769	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUL95m4nXMqHcx0JJe	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1742279.547046	Cn7e8j2bMCQQFpQBqk	192.168.1.122	56770	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4xjo1SbHkTBOM6G2,FO3STq4AYkHTPcmry1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1742536.740897	CEbb364dYe6OoQFJH1	192.168.1.122	56771	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfQPaz2Gd3r13VxVs,FEKfSfbjGPl0ygRJg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1742827.497793	CcRlc6g5sxkxO5S5i	192.168.1.122	56773	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBzJmf2xmXM6ls4Sxi	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1742955.555404	CX85HZqcv4tn1pDLf	192.168.1.122	56774	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhFn7r3LcWKOhrVLRg	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1743099.876538	CYAq8HRdru4iQ591k	192.168.1.122	56775	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0Toet1J2FctSmpNJ4,FwIMnr4FZal6BlUUY6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1743640.554694	C4Wf9U39D3BykVJlM4	192.168.1.122	56776	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGBo8Y2bG5ZrvcUBg,FUrKwc2QlTdGYQ0Gch	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1743962.326508	Cag83X26vMh5qTOMdk	192.168.1.122	56778	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQPDQT2p5qzhS5jNI2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1744109.373652	CSQQdl1OtkRTJof0eg	192.168.1.122	56779	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9LEc93kL02EMCYs3j	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1744237.692462	CKGmHl1S9JoMPTp2Tc	192.168.1.122	56780	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FskjzZ3ygQkzW8tHWf,Fsv6nL1QIHVsW3x1Ha	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1744875.380852	CryD3G4ug0U5xi5AVl	192.168.1.122	56781	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxdFpEuc0Emdj2hb,FEDScd1kZkpk4G42mk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1745188.157217	C55gKE49avr8gRuHOg	192.168.1.122	56783	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5lUJGXZJTcDr6gb3	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1745343.207722	CQrAKwjZaOhMkZWP2	192.168.1.122	56784	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FCPxOp1OZNAxmpr1b	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1745471.528209	CjG12i3Amzad1oxtU1	192.168.1.122	56785	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEOhTR2WEETZ3ETnu1,F86aGe1SifWSp5vQE4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1746109.223496	CQ5WY1324dcpFrAK8h	192.168.1.122	56786	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSo8na1EZIBpKKeyf,FD7gDk28usZwaD9J5b	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1746437.689308	CuuUte3PEapfh2Joai	192.168.1.122	56788	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FtMXV14DkhvBzctm7f	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1746598.753181	C1ABCP3z63Wt01mKF6	192.168.1.122	56789	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fs7vOE3712stgqC8Il	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1746778.075378	CcyZCG2s5BLuISNiV1	192.168.1.122	56790	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fqg5mb7wMAdIzGLS3,F41LDB4aKkxIckuD2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1747062.273859	CaeaEOMU1suXN0V4h	192.168.1.122	56791	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrUqF31fD0pie3BxV2,FwjjJJ1OaEb5EvBmT3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1747328.074386	C8uXEt2ewb9xo6NXe	192.168.1.122	56793	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FtvjG54tzf4JJ1AL5d	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1747457.177683	CJbblq4tjplZ3BRqWi	192.168.1.122	56794	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fke2an3jrmUQf386Zi	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1747583.493717	Ca4fyUwYQ0BqFRjk1	192.168.1.122	56795	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsXPGy2WlngIxtGktk,FsXGAj2henYV8oZaLl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1748193.189812	Cmg6LM3a6QjPR0CSCj	192.168.1.122	56796	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBIifq174KagAp6N3,FaxxhG4zzBoSZ5cWq6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1748492.978913	C55B5F3UMqaSMcOnM4	192.168.1.122	56798	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYFP6dW0XqKdC6Nh	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1748643.052963	CTWg2V12Ipqr5s6KRe	192.168.1.122	56799	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrEQJy1d9aL4O5o1P8	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1748818.389020	CWRG8ag31e4eI9Zxj	192.168.1.122	56800	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvN3q43vgSMFBFP9yl,FmokBF446O73xjHCd9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1749401.066853	COnzjT1Pm6u46RG7H2	192.168.1.122	56801	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FogjES36rfh7KeAA08,FOYSa02fY48zpaZG43	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1749720.572450	C1AZjd3vQMXtcEeaWb	192.168.1.122	56803	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FM232p4PDOXL9sZjbc	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1749844.680127	C9VcbN2PK898D4EHB2	192.168.1.122	56804	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxSfoO3OhrIKzckl7b	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1750000.998893	CwLimt34leoFxZk6fj	192.168.1.122	56805	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fx6DUv2dt4BmnFiFUj,FGH9aw3rh9BigPzLJk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1750608.693263	Cj8LRa3hdzEGzeBwJl	192.168.1.122	56806	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUURII2S9TcCg2MSV5,FCNwhS842quB24uh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1750932.501702	Cx2lg82toPw4wlc3Pg	192.168.1.122	56808	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FR3Zbc2IOQKDKE60Wa	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1751105.613045	CY6EPr2BksSMCUTKb3	192.168.1.122	56809	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtijnQ1EC8qqU3wse9	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1751258.927587	CIUEtS2hswFFTkBNuh	192.168.1.122	56810	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAncSH21CNYTotNQ84,FtO1XBG69dtVU81y5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1751853.604296	CTFhvS2dZUZwVEs8Bl	192.168.1.122	56811	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9D6wM18bGWAwHsXmh,FmuZJThLPF6YNxj1e	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1752150.096234	CfTBQp2GK375mdcQb6	192.168.1.122	56813	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FaFfZG35O8uiX5Jvoh	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1752272.190425	CUhuzt11aez2C3AHg3	192.168.1.122	56814	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FEdSbu1yqQxnmZXrQ7	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1752394.510288	CGe6vb3KzqSl2OIHn4	192.168.1.122	56815	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvmJLq28Z7mTirGgAi,Fui1jy22YUA9UpL1Z4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1752997.197040	CDjG6X1mawGd5qcAV7	192.168.1.122	56816	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQGqLH152rrVKyy5V4,FnRBnF2QN1DtfLzYxj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1753256.979658	C101Av8xeJx113ifk	192.168.1.122	56818	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmTKcy23W0iRdfaxE1	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1753425.047773	CwLfyk2iZdHrknpVUd	192.168.1.122	56819	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FCUuzn11ERmp3d8FB4	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1753574.376711	C38Kyd1YN6PqaY5yWg	192.168.1.122	56820	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvGAf112b45fcM2PXi,F2rLZtbPeXkZcUBK9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1754155.061649	CaR4Q725x7ORbPhmt7	192.168.1.122	56821	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOwy3K2WqdiVAZmLu1,FxyvlF1u4EHugRyk6f	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1754491.845507	CtfK9I1zKg8jQeHSNl	192.168.1.122	56823	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fgb09V3gsTn7drEGD2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1754636.900075	Cnn7idlzDtIt9cccg	192.168.1.122	56824	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPSnZ43Yxz7iYYH0G3	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1754780.250441	CbpnC12OeOj3tSl2X6	192.168.1.122	56825	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdU0oYMewNbVX2ww4,FTaU652RpNvBZlP93c	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1755378.931390	Crnu4W1ubVDcpNz49l	192.168.1.122	56826	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBC5bp4rte0V3dWV43,FY9H984Vx8le1wANb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1755633.443137	C8I9Ri2PSwO9I7YqOb	192.168.1.122	56828	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFiepi1Ss4DK5cM6Pk	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1755810.567630	Cs3jXw1m2Iwyyec37g	192.168.1.122	56829	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMDqjG3qm3sgRIHOK6	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1755975.909809	Ck2BOL10NO5ZIuwl8h	192.168.1.122	56830	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Frq8Ua2907dcZKWpM5,FS0RQo1N0hSoqFkfSd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1756590.603572	CKkMtU2qsVkJaYYvIb	192.168.1.122	56831	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVqAVz1WIU0InjNZX2,FBPfAD3SK5ls109Ntf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1756941.097851	CEVGLc25GQJ5lAv5y1	192.168.1.122	56833	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FuxlBv4s8NRqVCVJHd	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1757096.196050	CNGWN71i1phbN76178	192.168.1.122	56834	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FFUvcd3AABofW8Fqbb	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1757274.516510	CbDhiq4VkAvV9aSaud	192.168.1.122	56835	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcCbuw4Ja39RF86GRh,Fd9S4Z153JhmZMQGcg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1757527.710742	CKh7Wu4lVIijEgEyKb	192.168.1.122	56836	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmRkkb3CfrEDyjhW1g,FLNuRH3NJVdl9VlwPk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1757832.494782	CVFDTF3Gvym3bOp9c	192.168.1.122	56838	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fi2kqvXeDcXcD4UR3	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1757996.596947	CGoap24P2m53eVF6D7	192.168.1.122	56839	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fxn9u44esqa4DHvIGk	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1758147.923298	CVZ6LR2fQHfbTwSFW2	192.168.1.122	56840	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F81AMMlII8Wn8dZYe,FSrUdy4TRIzYUASGWl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1758746.634118	CjiONm26szcUOR8HE6	192.168.1.122	56841	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOqJ3A4rfa6QXnJldk,Fjsdra4YONjExucXwj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1759044.194620	CiEC3S3H2h6ySyZYt7	192.168.1.122	56843	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FSFods49OYFZatBWf	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1759167.284887	CNU76j1zEbRsQVtL3k	192.168.1.122	56844	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfiFozFenkUKhLkN9	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1759290.651869	CxLCHL1ut9fK8NU1K6	192.168.1.122	56845	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6gUow1rzV3eMOBgL,FEYTV82TTtCA3dMUEd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1759630.894083	CghA2a4Xw878WMY436	192.168.1.122	56846	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ft31Ne2MghCBaBhRS4,FEkuZN2xZhKiy7mRD5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1760205.888795	CgOtAn2iqoWedQEVXi	192.168.1.122	56848	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcNdru1mtw9NftHP2k	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1760383.974204	COtTWhH2VY03kwxB	192.168.1.122	56849	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FbP0sc28blvsyjZ5i3	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1760551.296799	CnUWbOQThnyk91gM3	192.168.1.122	56850	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7K1oQ1j5jN2o8PChd,F1HMiY3Q6UlZiWR7qd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1760797.492029	C4XrTC3exztEZXKGJ8	192.168.1.122	56851	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvC61vSdN1IG1USPi,Fiwe8t3WagKRFCiV3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1761136.262024	CbYRiixzpPFY1THlc	192.168.1.122	56853	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2ifN12HuToe5Ngp47	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1761259.341575	C9c4nc4U1MBpmGcrj4	192.168.1.122	56854	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXZsZb2WhVRVUVcQee	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1761434.668385	CZ9yKg4NLpsGohxSah	192.168.1.122	56855	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLk4VJ29viFz7PU1S1,FYNUmM1mneHfIxwf34	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1762066.366498	CcNr4W20YcQMRH9MMj	192.168.1.122	56856	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6dsfGoRyTYwT8tWb,FrwI4dI4JTIVFTkcb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1762423.132372	C4KapK1bBaERViLbR8	192.168.1.122	56858	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fcdn974fm0GDxnJ7li	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1762556.206071	CyiASo1r9qK3PAbfB1	192.168.1.122	56859	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBOPkR3eKZpCb87oj4	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1762734.547438	CEyAO92mmIG5gPA1O3	192.168.1.122	56860	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FT606y4pOWc2hvH7Fd,Fc9H9g1d6EtUOE9H76	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1763293.230529	C0VVjNtBzhjjno5Vf	192.168.1.122	56861	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFUfSg492K8NNIpuy9,F1Sko91tYXMUBhWNE	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1763586.008256	Cjr7t44NxOY8D15cxc	192.168.1.122	56863	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBNatB2brThF4esev2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1763707.071696	CmtFgx2y0i2OFeThJ5	192.168.1.122	56864	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F14KPu3H53th1ailu	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1763850.392478	CrKnBxLOc9ruUyNcf	192.168.1.122	56865	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlXc6I103o3qQhvjYl,FJ1rF33y7mIGcP0RTc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1764494.076673	CJb4TpunJvepCmuPk	192.168.1.122	56866	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcALzQ1xyr7Nj4tvsc,FmPh6klMeaMPxzqtb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1764780.846131	CDml7e4cUELZutKKCh	192.168.1.122	56868	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FfL0tt131PDkONYPo	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1764920.906318	Crx3H533qy4JgibeIj	192.168.1.122	56869	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Foztwk4UbGZpfD8Nu1	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1765090.223955	CoZ6mSUaTSIH6shmd	192.168.1.122	56870	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FR5BOw4IL9Q1esZHo3,FwNLBv3IKdbt1pl2B8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1765630.901364	CCRx084xCOLnKy17H1	192.168.1.122	56871	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAEwgf2IVdDr7K6hce,FcAyuX1ujUGIoMLV6i	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1765941.696033	CvfPjv1oJfrGQwCpMi	192.168.1.122	56873	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZp3a93C7JWekCqnz8	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1766099.771196	Cn9lIf2riqpu8hd9Gl	192.168.1.122	56874	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBRR4q1BdzIMH6xzea	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1766232.095787	CEJRrX1hPrPr30Oy62	192.168.1.122	56875	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCtUXmlpcB0hVh392,FdA6Vj3VODYaHl6zhc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1766877.773839	CLPaWJ2aomBVxEVbve	192.168.1.122	56876	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtZPCd4zsEFnujcEBh,FvpXcN3U3HXqHScru3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1767196.584579	CJyupr1qGILzvpPKk6	192.168.1.122	56878	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJxIG02pC7rCau60ol	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1767347.675660	C2PyRq3yas0YloSKee	192.168.1.122	56879	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLiYt53yJx9akCaz29	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1767475.994081	CRhYFi4w1bmkoj5Ulb	192.168.1.122	56880	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fubc3W2A7cRJfVAEMb,FqBnOa4XIxwn4d9yzc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1768077.676117	Cjg9Dn2DYHEtmCcI4f	192.168.1.122	56881	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrvMcs3vEFaaKX80J3,F6dRaU2xzRb96sBhmg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1768342.186175	CnM1iB1MdWnfAEd7A5	192.168.1.122	56883	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0S29t3IL280lG5Zn7	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1768495.286049	ColfVk3jAbfpFot6Z4	192.168.1.122	56884	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNDIl7UF1e083myHj	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1768621.601454	Cp2cBX1ARCGegHoBJ5	192.168.1.122	56885	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHhPtj4sDaZlTmuP2k,FUCjAt4gEpObdpRPD3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1768891.799603	Cvzczr34o8glXAfppc	192.168.1.122	56886	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvyIsV3wOxcjgL696k,FC4a6Y3l77ZiLJOoK7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1769210.571709	CESemPInDhZ2lld36	192.168.1.122	56888	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzMduZ19xOIyoGDeM3	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1769373.618222	CBt1Vv3Eh3ZofwwgWk	192.168.1.122	56889	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6LXtbapvtuqW9V55	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1769523.948627	CVoMyj1WUtvpnaJAmf	192.168.1.122	56890	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9Ku7o2uyq29cDzyNe,FwMEwj2FYYYqnU6o21	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1770108.639404	CRljIo4wsAOEsLzNUl	192.168.1.122	56891	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3iIVj2pjRuOqmKNr2,FZDFsh2chah9x7h6sb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1770375.396785	CIjBDq1mxJD9mfwt35	192.168.1.122	56893	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0up3Y289GgDARePl9	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1770531.453223	CucRRp3fFC9KpFR1gi	192.168.1.122	56894	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FpXB4Q1n1Mmui8ywv8	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1770700.781995	ChJ66GpMYmcRdG3Xb	192.168.1.122	56895	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjUlMp2FMNpAMfe0x,Fgmbfx2HoY6ABUH3yd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1771292.472098	CeuTom37KM9ZvaFeEf	192.168.1.122	56896	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbKpTBsK9VVNRbLP5,FspKlIapnzjL0xYyb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1771613.943886	CQi1Iu28mceuDEG6Je	192.168.1.122	56898	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FyrbV32CMc7V9Jy489	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1771753.009119	CCZewB1Ct8p0xgailc	192.168.1.122	56899	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2L9Gm39ZCLdsDRxjf	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1771929.336943	CZvKeq2HvALTfBkYc	192.168.1.122	56900	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPU8UO3CuQ5se2ERM4,FOyY3l1nWjMVfP0yb6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1772208.508389	CCAMk53y81ewHdqeZi	192.168.1.122	56901	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FX2gB44cUc8wXlotM5,FIUIFm2l7j0jwZrA42	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1772805.486463	Cgw2rk2Lb8RoLW4Ooh	192.168.1.122	56903	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMwqFy19Ct6S6p6Qp9	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1772967.556393	C7geW94sEuMcppPCxf	192.168.1.122	56904	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F64ICV3pR20WfL1pR9	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1773090.876253	Cd2ERh9SfvorjasP7	192.168.1.122	56905	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FO2WlI6o7ZoCvgyH9,Fr9mLg19IstYEqxdph	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1773728.564324	C7VzUc3XeCVmTDuwvk	192.168.1.122	56906	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FW9MSV1ucVR6fbZB5a,FuvoT33UakBFJRIsa3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1774060.353700	CYTqS14zwBHHIS5C9f	192.168.1.122	56908	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FVMSyJ1u7t5PztpOYa	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1774198.445572	Ccqim619m6pEG20CXg	192.168.1.122	56909	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1L2V44y0rsGmYuMOj	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1774349.777224	C8EHKb2IMR2g45X7Y	192.168.1.122	56910	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fbte5xh1i0yj5u2ac,FP7lvbLIsEb6mI9Ce	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1774960.465697	C27eDM3Sng8pC7jqOj	192.168.1.122	56911	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTePZ83N2X0wGG9Mka,FjGAWVDeMVbOTZcqe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1775306.238688	C8BBdo3jsgW3tvP8o2	192.168.1.122	56913	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRvZQX3E1n6YlB4OU8	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1775473.348134	CqmNq7mMcHerkZqR5	192.168.1.122	56914	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKM3ks4hvcg63zjDo7	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1775612.692953	C3C1993PuwKaCHAOgh	192.168.1.122	56915	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fb7O412p3LHtDhkkP6,FGNMfb4zUvmN7GMLmg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1776165.387773	CGEDKv3qMTviBJOuE1	192.168.1.122	56916	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F18UV2FmyNoBWmmqh,FC4Kq03ptkxjzIEsBa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1776505.162095	CrlOfy2N684M55fbq7	192.168.1.122	56918	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzkGP83879OkHwZID6	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1776680.213608	CFLSlm2DbZg91Y55k6	192.168.1.122	56919	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fa3YkARInIAirFH9l	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1776839.536808	CGwM4l1GDp7DkYxumf	192.168.1.122	56920	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fz0sDQ3YNwByODrSO7,FX3hM31dn0PdqVF6gc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1777464.215176	CBP8lx4E4ErBzzaKIg	192.168.1.122	56921	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9Tl0i2tRyVdxq2fyf,FleF76sD1NiEFObwd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1777755.986529	CT5IvJ2rjbGqm4QmE5	192.168.1.122	56923	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpK31j15QG2mQiUq7l	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1777886.057054	CyhmSf0aIkvd1Iz2f	192.168.1.122	56924	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FC45wsulDR8CWqMZh	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1778040.383345	CDzA6q3aZzHCUk1uP9	192.168.1.122	56925	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhZY0x34DoXBDie7h,FryT2I3MRtE4EUP4Ge	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1778637.081370	C6ucTy4KXMNKKzEhE3	192.168.1.122	56926	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Feinyn3YfuUpEDjyx7,FwAMKC1nyssiwjHh75	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1778894.857789	C5GUfpR0mJfMZ1VD4	192.168.1.122	56928	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIJmNB4Vsk8ei6SDXb	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1779052.334079	CwbJgUnHycJxwab3j	192.168.1.122	56929	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FiEm7n3QReh7crdkx5	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1779196.135092	CNGVjI3Loj6T8inNUe	192.168.1.122	56930	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLqvFy1UbEIBOxwbA2,FOpXEo4V7xVJkmaXVc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1779764.832705	C1kl2y3RthzeSUyYAk	192.168.1.122	56931	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsooKg3DOUhlm1XSy8,FNcxi43UfQFJCtrkm7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1780083.611175	Cf4Zty2Nqf4Yt5F012	192.168.1.122	56933	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbRNjq2Z4lFs8ejVv7	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1780217.209191	CsnBgA3EOwdoYy8WIe	192.168.1.122	56934	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqJnx63sd1L5OfzUR6	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1780362.702282	CC0qOp4ArZYjal1E3j	192.168.1.122	56935	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyNkDc1NwGIu4FUNBk,FeZSWYnOG6G71trPd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1780989.383448	CEuzzfcflSsJSr7O3	192.168.1.122	56936	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FryjGT2su2jOAteUNg,FlR1Ry4PMafvPlggeh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1781263.194195	ClKtkY1JfTNnRlgbti	192.168.1.122	56938	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FfHvY549YornTTPWS6	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1781443.322944	Cnhnc33BihfCVxBHra	192.168.1.122	56939	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRCQzn2mNRwECvUCDj	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1781595.673860	CV52hJ2J5WIjutFFs8	192.168.1.122	56940	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLRtGUAniNqvohie2,Flg7k33Gv6qk3Rr1w7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1782198.351708	CNIdTL2jOBi6pOtf74	192.168.1.122	56941	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFbTJO2Uj39hgL2Wed,FjdB4Q2WVuKbbc4y3g	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1782501.802053	Ce8ooHVHY4ibcZiM6	192.168.1.122	56943	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FjCxTr2yUa4DVAA62a	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1782664.867877	CD5qfYNhvIj1H95Y6	192.168.1.122	56944	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5gIVEkBnvMAa7WH8	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1782788.219590	CqLv0v1VpMUzXFDIu8	192.168.1.122	56945	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMvwPW3MCdqmRyAaAc,FnOsn81H8RJX0LOAIa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1783411.917138	CjpZZ835b6R7UUiYkh	192.168.1.122	56946	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLd5kN23AhlTxZ0la9,FS7LQG2ekn3l2F2Yo8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1783763.724399	ClPWGr1ByKIr6AI9S5	192.168.1.122	56948	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqPZHAbxZ6aDO7htd	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1783899.843941	CCHXf14BAQ8lqjQaof	192.168.1.122	56949	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fsn6TRQGv5aI1qAf8	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1784064.194104	CrW4RU2g80CpHV78Fd	192.168.1.122	56950	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFlD6h3l7iq9MpPNG,FD6HrL2HksKvRdhri4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1784680.871044	ChKWVE1gbpwvMk3X3k	192.168.1.122	56951	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRCAVt31ctcF6HIQwd,FOtDXPZ6YxjKPnRek	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1784989.619323	ChxqDeVA0ZnjBGbi9	192.168.1.122	56953	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdVuHPnZz5d4eZrv4	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1785133.688385	CqXNyq4SWCYcwcsetg	192.168.1.122	56954	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUWf1z1qHM5WSE8bE7	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1785290.036690	C9J0Nm1NYpRMxMbEJg	192.168.1.122	56955	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FooXUJ2KfJPOk0Lkmk,FaiavK1jVuK8MDtmK5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1785917.709194	Cpxkjg4LVzqO6yKnAl	192.168.1.122	56956	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFVpA84AhyZAdiQu88,FtvsoPXPknPeaNXVc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1786239.479213	C5JFfJ4ggCkx3YFu5	192.168.1.122	56958	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FC3PoM3WSlPTxtzvLl	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1786403.584768	Ca4f302dddQAET91S3	192.168.1.122	56959	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQlwuU2N8ucmKf0Vd5	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1786569.936760	CxwRkt1UY9dFs1cZ9g	192.168.1.122	56960	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBUGJ3MOrPbGQLrii,FN2D4yzpzBa3ZKMl2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1787151.623288	CG5pCu40AEVAeSTXDf	192.168.1.122	56961	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fz8H8w1Vfdiviy4tok,F1621T2T6HuYn0XwSd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1787463.398940	Cyvvao3FjU1qPx5qFj	192.168.1.122	56963	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FSgLps4D233YSe4ve6	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1787589.529135	CPlBVk40l7PQEvWG47	192.168.1.122	56964	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fj8y4M1ruuiNKAWSMf	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1787725.878869	CfV22LbW3Jfyedm83	192.168.1.122	56965	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrWOa6YjxkAZpjR3a,FHcp6f1AyqfWzP5nM6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1788308.577049	CoOUyFW7Lz2DdRpXj	192.168.1.122	56966	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9R0XP1kz6eEEUukxa,FN3J102YXxHZGhKEJ3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1788607.359224	Cyhqgu1nCzjawQnVH3	192.168.1.122	56968	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJc5bL25gs12gaOftc	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1788761.483492	C0LgYV1MITsSbPJ4x8	192.168.1.122	56969	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMLyR73oKhD3X0Amva	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1788929.830055	C9Cj122f238M8GXkW5	192.168.1.122	56970	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHECdk4dWLMpbgPb9b,FCL2JK1YIbdavtqPZg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1789512.507792	CCmt1U1bnJIJCacqu7	192.168.1.122	56971	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZfPlo4vTOj5G7Dwj,FNGBqP1GZu91cGJUMe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1789801.297741	CTQ32R2g59nJlGdBa7	192.168.1.122	56973	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlKbaH3F7EflDoEgVe	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1789931.395748	CCiY4d1RAzjiUNdiL8	192.168.1.122	56974	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FVh4SA3CHR06T1Ckn5	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1790068.748876	Cw3Xf21PybQE4E1XIe	192.168.1.122	56975	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fkmf3d2GCKfkhFTUsb,FhwYjE2UPDzRLF2ZSk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1790701.427215	C3BbmG143PWRapL703	192.168.1.122	56976	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbgPFu4m6hwVzCq1Sg,Fayu4y3LLDvVDC3ADa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1791034.194950	CpRhcKtwJrT9yEY0d	192.168.1.122	56978	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhdL1O3Ovl9OnyDrBd	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1791202.253118	CAs9J23a1zg1De4UW6	192.168.1.122	56979	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXYgRTd1V3tCjXDik	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1791350.580373	CeDHtrP8yOoip3qjd	192.168.1.122	56980	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZqVD13YWjCnoDo0m8,FOjT8I3NefXTB0FFEg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1791930.253861	CK1fR52bJ6Edh106Ll	192.168.1.122	56981	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuZq4p22zmKGYB0av8,Fur7XLAaA60SdxFj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1792229.027396	Cc1a4c2nrCkgcgkKfj	192.168.1.122	56983	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F82qMkMwS1jBOiAy4	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1792390.100855	CvdQF3HNKmo5j4pe	192.168.1.122	56984	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXkyoX3hfK6d2NJFn8	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1792554.431237	CwjXuL2cS1mkBwPmrd	192.168.1.122	56985	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyTTrh4nOoDauTghNg,FaePFT2lozn6y9g4ri	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1793209.102559	CBgto51G4lPVtijP63	192.168.1.122	56986	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F22BC12avnGB5aSxS6,FCBU7B1dsDITl9CUy8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1793476.583799	CbHoLQ1uFt6AK8QyP9	192.168.1.122	56988	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJu8IS3qlUMs2wgHLl	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1793631.676122	Ckhv6bSd38ILtYLl1	192.168.1.122	56989	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLD0SI33Pxopl9xTsb	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1793776.007738	C78bjy21GRUhAkNzMb	192.168.1.122	56990	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLgSaF3zfuwpaDOWH7,FiAoeO2JXTi6ajBcn8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1794338.686765	CXJrtB20hS9A73VQS2	192.168.1.122	56991	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEQsxI303XCqqv4Zw7,FfljiR10sqBH0cS3Pj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1794626.432289	CfD2Yi4mJkRiyGt72g	192.168.1.122	56993	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIv1aWtvZreXCJMYh	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1794759.477570	CQv7ey3HL9ZdekBnre	192.168.1.122	56994	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7hOkB39NXwPGLdAm2	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1794901.806423	CMK5t41x7PVpSvCJb2	192.168.1.122	56995	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fw3fJ3dtz5utVAy69,FjaI3n4hBTnvks9aS5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1795476.472515	C24skf34CCLvLKPizb	192.168.1.122	56996	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbG0RQ2k5P20hL3Wgl,FACBSy1MslmhphSJxl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1796107.466957	C04yxxxy2IBGuG46l	192.168.1.122	56998	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FkBX2y3xnATlFCuREi	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1796239.546960	C00X2rO8EBvyNvpJl	192.168.1.122	56999	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FzNWDOY4PEV2ShUIc	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1796401.871707	ClfiWU1vuOKJlYjX2	192.168.1.122	57000	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYMDVy3SYy20OIBmRa,Fiv6Ov3PzxSUkGXMAi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1796984.540493	CCrddh46yZsnka2Aya	192.168.1.122	57001	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuXMGc33mUDJpF1579,FIciMD1FlmjBQKCHwa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1797321.331487	CmyfSdUTPFghcvWR7	192.168.1.122	57003	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlOP6z3Je02r6MUeYl	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1797453.430373	CsJHO71k2QDZSWRD7d	192.168.1.122	57004	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrUmJP2i7EQe9KpG7l	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1797631.751741	C9bwEs2zL1GwtmMrH6	192.168.1.122	57005	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsVBxOisQ2F1HxdV6,FI5too3PCfCGmzyz5e	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1798287.424563	CyhXyG3hiXgDik0k45	192.168.1.122	57006	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYpb91jUQ66Jdwar6,F3j1YZ3atUD7408Ph7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1798577.878130	CvkVpK2OypaOLsyH8g	192.168.1.122	57008	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNO2zZm31amKV1srh	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1798734.933259	C0sJIK1jbKVrMsylZi	192.168.1.122	57009	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FvvQEKTi1AqccZLeb	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1798865.265072	CCMOCI16dMxKYz7oR4	192.168.1.122	57010	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnkvtL1mItUqXgYoel,FXweBz11RL9s5jtr7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1799155.732546	CeSkuvQyBWnpMgJT2	192.168.1.122	57011	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F73FAF3wII8BnFAlb6,FwIffo2xW2ECkgZDJ1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1799491.507560	C8ULHbnpEvqNxmaff	192.168.1.122	57013	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0vZdL1pbikpNS6HTj	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1799665.582155	CRyAOS1VC5XT81oUHh	192.168.1.122	57014	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRH9lU3DABMq9OXBGl	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1799816.903549	CqHjjt1gBgEBeTwMwc	192.168.1.122	57015	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FN6jwR3TOuJnbeHx6j,FXKtbJIFFiarF0Pf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1800473.587478	CkRnKvIVgQEwe841c	192.168.1.122	57016	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMTNy91PWMxPuAeILd,FmfUm128Zhyi6EpEy1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1800747.091531	CYathB1N5tTy9ayOvj	192.168.1.122	57018	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FttjmL7nv0PqaFR7j	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1800895.189359	ChkTPk21HzKsMTGde	192.168.1.122	57019	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FuZp9g3MX5mtHyhxkb	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1801044.508809	CbkI7n26oXhblUeJea	192.168.1.122	57020	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fm8teD21tKlfl4pK79,Fvu1y74vpjZLs21UQ3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1801644.190636	ChSkwABOduSxuAdrl	192.168.1.122	57021	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBozuR2Z4Twh9Yi7q8,Fk7moV2pWsBwfx5wAi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1801907.699150	CAMIOzje1G89NEOic	192.168.1.122	57023	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZvA6s49gzfP8ZpEDf	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1802058.822531	CWZNZs2EoBcYO6QZ44	192.168.1.122	57024	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtxLfmEdE2kmjB1e2	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1802197.155322	Cc1Wqw2cfGZp1XQDD2	192.168.1.122	57025	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkpUtW2fQGoI5BYh4d,FxS25p4BgfgeyjpY8h	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1802784.831990	CCaQwe2AUPRS1B2k6b	192.168.1.122	57026	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIM2lv3lRG94TsSoJ6,FLAhuk1aBC28qwCRvc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1803139.314176	CoTYjQ3H0aE0BUc7Uc	192.168.1.122	57028	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5xSzQ3BngfdThpQy2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1803287.378586	CZy3Dd2Kl5sHIiLTh2	192.168.1.122	57029	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FW8KbN31mWj2HdQUBd	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1803434.704992	Ciyevh3XfeRtqMPj93	192.168.1.122	57030	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYz1Lq1IubHvi5W4kf,FEPX5B3fpZ7xKMLj51	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1804013.387884	CS4wuiLFKYzd6hQ5i	192.168.1.122	57031	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fx2ZRM1pvVMjOpLpr7,Fg20GuayZxNFC5fAc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1804318.178344	CxLmeI1c16oBnovABd	192.168.1.122	57033	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdzQgk4J2Jqe5JBjsa	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1804468.283071	CXKGIf4Vf3jI8ManTh	192.168.1.122	57034	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FsENOd1DRdRRugz0Uh	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1804638.916131	CLojuK2cI9Rq7YqhG1	192.168.1.122	57035	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fh0hQq4dBpYPboZXCa,FkkpZVd5f7Qyz0uMa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1805292.596528	CNajrj4cqvKiLFAhO	192.168.1.122	57036	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FT3a2l4zle8IHpEYl1,FGERKP1KhBb8swwQua	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1805608.091551	CiMPtDQpuT9ORezrb	192.168.1.122	57038	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FtRUKdy0gVWpeu01l	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1805776.197088	Cf0nkK2sFeB1ugrEuk	192.168.1.122	57039	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIrwv7LpVzciiJz52	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1805946.025507	CLvT9g3Tpf17ATT987	192.168.1.122	57040	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPiU7x32ZMmqe16Ux5,FDDO5K3NNLGjUNkNWj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1806263.191498	CpFuyu2TCGgua0z6D2	192.168.1.122	57041	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fb3uNH3tJHGXuaTyHb,FwOdqYmD0mXSpjwXb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1806568.635754	CZQIzx4DPWYasu8Rpb	192.168.1.122	57043	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDJu261cST6wB0BKwc	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1806710.680953	Cka4dj1eYqPXO4iWMd	192.168.1.122	57044	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fu2caQrViLBEGxX27	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1806841.002250	C2VAqR3iuyeNTsGp9f	192.168.1.122	57045	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcpkHhexR8t1sGcp4,FwPPK64BZJFR7uZ8Gj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1807455.676168	CCC6H52wvoFqfkhou2	192.168.1.122	57046	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJzlxn1XEv3yLuhpCa,Fq85fv3ddlWDhBmjNl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1807775.160553	CKNPTg12mRVn8Lr802	192.168.1.122	57048	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FuWfCn4BlV5LgVVXUi	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1807899.229694	C2VQdMKEawEqFxWvh	192.168.1.122	57049	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fij8Dh3TB3CUK5J5D9	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1808070.550859	CP6FpqibbuT9bKbH6	192.168.1.122	57050	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYXWm42eah379ayni9,FqB9MWHdGOoLJrQt6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1808688.228379	CSkdNE1VM38aOKd7g3	192.168.1.122	57051	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcYHrw2VyL5S71HSg7,FMbuve12Xw9Ef7Sui8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1808948.013769	C0qu841yC3BkRxu8j5	192.168.1.122	57053	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fnuq9G2i1R99uwMhkf	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1809121.086413	C1T2QY1gaIldpMwtc6	192.168.1.122	57054	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUJNQc4pl41HJTuL37	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1809254.402071	Cotb6615I7oPFBLOii	192.168.1.122	57055	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbY0X83Aoq82LqqUrh,FtrFkA11zLJCUzaLg7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1809869.076677	CsmvBO1Vx8Pjf16z8l	192.168.1.122	57056	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPKgN43RSKBBOPC007,FLPdRSNC0ZDWBDY4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1810469.064360	CfxgSs2k7ZoYTWvyT1	192.168.1.122	57058	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZ19fw3rxcn1xaGvE1	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1810590.151075	Cp06e11cqJgFND1Qr3	192.168.1.122	57059	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1lock4NwAXQvT9N94	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1810723.473379	Ce4jgv1ph1sxccO8Wg	192.168.1.122	57060	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyrOf840d4hpqYmGP9,FuYM4wJ65VkMKAIU2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1811370.144768	CbYpevHOA2H9tItl	192.168.1.122	57061	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZQ68024Fe7vHDJfp4,F3vDnF33xLxvN9ruld	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1811711.924184	CmA5e32c1IRp2TwiS7	192.168.1.122	57063	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdNYUa8smCIDbQXE2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1811842.008273	Cbsy869H7DBpXLIJ6	192.168.1.122	57064	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgatuW3btRdTj99buf	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1812013.338766	Crm9Nb21z0MPozHt71	192.168.1.122	57065	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTzdLu3r1QcHgvyLC2,FvCK7S2t9qdgvfdJah	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1812309.504592	CpY9xO28qcw4DcTCl7	192.168.1.122	57066	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFdc1W3bu0PoSHSdCk,FnFmIAY65bLubD34f	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1812602.310366	Cfgu4j3bwbcm9pLpuf	192.168.1.122	57068	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZyepXFFRrdjDJ4Oj	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1812725.448451	C85eK91XeI331d2oH1	192.168.1.122	57069	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMtTRZJuEDhTkiRm2	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1812869.770861	ClLmSpq45tM0OZuo6	192.168.1.122	57070	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ffllkq3g5IyR4E6JQd,FuWM3239rRLYG3YE68	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1813182.930621	CC23we32ZDxvG57k7d	192.168.1.122	57071	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOsRY5qliFg3cOd2c,FtlsPI30hMQSXRgjq1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1813514.704860	CnC0nZ1Mb8RjQ03Bal	192.168.1.122	57073	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fd5svA34g3uDLYEN9	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1813638.781874	CsRAxS1Z2cLNrJDPAc	192.168.1.122	57074	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7FyYyq9c6TwNBUU4	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1813809.100715	Cn1EsY2ez4VI02Jbva	192.168.1.122	57075	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCX6I31Yf2frMHkiG2,FJXr1RDsEN3ZVZ8w4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1814364.769790	CEBmA34Ti7zGBkua0i	192.168.1.122	57076	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxtCfw2pMNHieaPo19,FrpKUd2rTe1WWCQcNg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1814675.554496	Cy2fNpJrqXsrNitR9	192.168.1.122	57078	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FOAKZ4260kbaq2vcN2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1814820.660891	CLhC6r3NsiNtOZ7Ore	192.168.1.122	57079	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FA7sAq1XYtKKA5fnl	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1814974.976959	C4S7msEqsxzMCDuFf	192.168.1.122	57080	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7QXtr21pt8MEWqwBf,FdB6aZ3quraI7aC0A8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1815227.179630	C9hxxF3ap05SagwHMg	192.168.1.122	57081	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8n08t2rU8IFeVLSJd,Fe4ywM3mWVmsoFj6bg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1815560.935164	CkCWLK36drnaMMqdJ4	192.168.1.122	57083	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FENfRZ2vyU4IxMPo0h	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1815711.000932	C1oxly47tvCtBaC0th	192.168.1.122	57084	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FChboS2ifGQQXvAMde	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1815884.325100	C16JtO298jDdX0xrId	192.168.1.122	57085	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3jxhN24qVPUCGalRa,FLZa2T3ZaaNQUe06q4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1816428.997582	CBA5DE2ZTXsgFdHKu9	192.168.1.122	57086	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fq4zyn4au37Yj9awM9,FkynlVeWeFXCr1iee	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1816702.782276	CFo0u71N1cxu4Nt0lh	192.168.1.122	57088	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzDrJX205fFSDzJBu3	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1816837.631518	CwqYRQ2hHz8xwtwl14	192.168.1.122	57090	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FE5aA830snvRO8EDoa	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1816957.958219	CXqUDu4SC7VMbBz8ke	192.168.1.122	57091	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDZKuB32weacxhJ8p8,FBNxHh362t74STnoud	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1817542.668834	CMGeCp30UmiuEFu7Ek	192.168.1.122	57092	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCVLM84T9tceI4muxf,F295Dv2QID1UicUwm7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1817843.472244	COEDZh1DPDAH52XHp4	192.168.1.122	57094	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fy7njw2ke2GBlF0tmd	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1818000.572821	Cl3M9ZoNfxmNiAv32	192.168.1.122	57095	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FyqhQX1GAk3sUaHOqj	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1818142.892131	CKZ8xt2zJZmYiqhqod	192.168.1.122	57096	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fvkgp73rs2vjzzJbt4,FMgQcB3C39wSxbilgl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1818732.579789	C5ZTEp45DHiE8FK8x2	192.168.1.122	57097	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSf0py4f8F8KzKUZ17,FeOpuq3KfPy5ZHsSLc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1818992.065280	C4XKiqfhJGJB5VbHl	192.168.1.122	57099	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBhvzw2AxP3aoZd51i	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1819156.155357	CUhqN32PIHB8dg02K2	192.168.1.122	57100	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUrYX64dTafyLt45Bh	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1819296.470401	CxHIUz3lqTFmy217Ff	192.168.1.122	57101	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfOV2LyIWkH85lEbg,F5VAAV3OGpvBKame1h	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1819884.145715	CHgQfk1a18gbnM59v1	192.168.1.122	57102	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQldPR2FowCveEgK71,Fxqg6m4645cKds3Iif	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1820204.926148	C7vq6w2o944sQ4dHed	192.168.1.122	57104	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNWwH64qaqExu7XZw8	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1820345.034184	CKW8j62tPXldbd9oY8	192.168.1.122	57105	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FbmM2c3q2MIdHQQfal	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1820473.352496	CDkDS81elkNlcVZ8ie	192.168.1.122	57106	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnjJlUDwyJt51ruqh,FVCiS443sEuVrG37mk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1821133.031180	CUEy0z4jKX8fofPRb3	192.168.1.122	57107	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCHSXo3mBqglFko1ug,FxZtulqQyOQHQJvP4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1821438.542520	CI2k5y4bJTrmZ6Kjdl	192.168.1.122	57109	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FtyBOU3OR6DwwtPL5f	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1821605.656193	CwjWl48aaaXFjGQ5c	192.168.1.122	57110	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLn1qa4rOYn0QiKfw	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1821735.987779	CwVFIl2QWPV3geFCp2	192.168.1.122	57111	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYJpFj3hy6lJWTZIkk,FIE22Y2xcNFBgeeRR3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1821977.154578	CLEbs64AYG5ZcSxVm3	192.168.1.122	57112	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmnVhK2uxqHF79w9c6,FhBzReJDz2cWWojX3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1822255.942231	CeQtP81V3OkhgcavJ3	192.168.1.122	57114	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5obRI1uLufeKjPGH2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1822430.002081	CfgKwd1rCdcD7ErM46	192.168.1.122	57115	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fuxv7v3OPp9s8ut6w4	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1822573.331833	CSLqnw3zh54mtOXyb4	192.168.1.122	57116	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXV9a44SpMBApFwO16,FBbSb71LxaAgX1bJHa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1822913.511093	CWEwkr3X891s98xaNh	192.168.1.122	57117	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMqln035Ep7gZnsco8,FZ2bTz3VwP2FTItWMd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1823211.009218	CiMJAh3TQw2GnaIDY9	192.168.1.122	57119	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FostwutLOJ002cjSb	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1823367.108864	CJ4Udk4EFbey7ULLj8	192.168.1.122	57120	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHcWVl4QsNtVu5OWq6	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1823511.440601	CZJkiM3tDv5pyhE772	192.168.1.122	57121	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4uBMZ1QdHAvtDaO6i,F8N8Cs15fhL7YuzEq2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1824097.122678	CuW03n4WU9cPc8eOC	192.168.1.122	57122	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZx28w4uM3vJaviMcg,FhRSx32jxn6RKjHcDi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1824359.616368	CT5Bw43hFyAF075XM3	192.168.1.122	57124	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpETRO2pUYxLWte8ge	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1824536.700858	CqPIEC2FBb6lshKEU	192.168.1.122	57125	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FE8zeA10ofy8RyqM4c	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1824667.022032	CtPnBd32nYvQrU7qd1	192.168.1.122	57126	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqSGep4KFqL3nwiv5h,FjgOuo1Mh3Mg8tPJ35	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1825239.706241	CjCL0G42N6sndCxmi3	192.168.1.122	57127	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1erHh189YGMcamsz1,FmcFck18oqvF79Pm1i	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1825532.484768	CCZvMYe00BNs9taO1	192.168.1.122	57129	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FH9jFV3zHqlpGq1Hr4	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1825712.572436	Ccrn4k2esaj9EPJg32	192.168.1.122	57130	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdJI841XplBEbO70Nc	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1825861.888855	ChgnkH2Q4XGa9WtSch	192.168.1.122	57131	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FslSIm2XkSebSCgiV3,F0tL1H1OhC29PRl79h	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1826450.556511	Cr1Luk46ei9cwEfNdh	192.168.1.122	57132	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fz3m0W2quAAYXjN6y4,FODjS63YoWVACKEKT5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1826773.058650	Cd0dYl4Gu8nSzS48u7	192.168.1.122	57134	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FemWJg2560IY8BRjWe	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1826948.157881	CmKoxc3c5Hdvq408J1	192.168.1.122	57135	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMXovn3UvQXqxk02sb	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1827085.489301	C41bQH2hz4g9LJw6Ha	192.168.1.122	57136	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBTCkV2Xe3JQLa57qb,F1Hk0sdzfh0HYSrh3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1827667.155540	CKBp4n134hoVOriw6k	192.168.1.122	57137	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCSnZA4VwNwir2c9m1,F6Jnln4eXeIbKADCca	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1827964.620508	CcOSUp4P0IDhqUEsj2	192.168.1.122	57139	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnVVI120NSbjkPeDKk	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1828102.709037	CwCa1P125sYlw6WfH	192.168.1.122	57140	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOnEya1Q8H4YWwDkx2	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1828227.050569	CiLp45RCpENpSFky2	192.168.1.122	57141	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGBH7z4MvZpz9uzKTk,FCeP6f3Wfuj1umWpE4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1828852.730285	CFGRFQ3wZuiUQ09TZ	192.168.1.122	57142	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeWTK83G8EztWsPSSi,FVhPFf2oPxyvt8lsTi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1829153.488120	CjQQfO3k1BEMGtMGgb	192.168.1.122	57144	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fq37uh49NQt2Fm2BB6	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1829282.544547	C8HfMA4VeJ7k1ztimk	192.168.1.122	57145	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZzf8m3LaTDnJ0Skgd	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1829433.865909	CRsvW9qwtLnEy5v6a	192.168.1.122	57146	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgT88a2POVPWvXicYc,FSzAUU3bZ5A1hCSRXh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1829989.535052	CbG2Dm3sfN2MPDgLz3	192.168.1.122	57147	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMCiWw3kPyr731bpFi,FGA8744CIL1ilUinrg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1830287.305400	Caotq7zZGPtMfUnEd	192.168.1.122	57149	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBqUzV2qRfDLDT4pGi	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1830464.363257	CsbxFg2Jfe8VWEVTW3	192.168.1.122	57150	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXaDKo2uCFi9fxg7qe	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1830618.679148	CVuXKsf4BKJfM884	192.168.1.122	57151	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhiV4z3lhcNpKwm2fl,FAiaiY1Z5a7wiUdgc3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1830894.856394	CIcbUh1XPi7PdJzmFj	192.168.1.122	57152	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fj5jaJ3LGJsLuWCJvh,FvjXAVl5TpktSC5bl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1831203.346637	Cv96nL2irBB757wnN	192.168.1.122	57154	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNGTny3t8QYup2ENCg	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1831356.415690	CN7sbd4ip7PJQQGIo2	192.168.1.122	57155	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FebIF01G1eHuPiq7Ec	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1831484.736583	CKB2f63M3E0auOobt6	192.168.1.122	57156	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWpAR3LFQN12wBsz9,FYKjD34C2MMyVRvM02	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1832045.410759	CFeZPa4HrBx1x3W9b7	192.168.1.122	57157	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxODpnqDdlYtBnYA,FPXMX73LLNXTVyS3Qb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1832369.893004	CgTBok2q3yEgukneE9	192.168.1.122	57159	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8VpDD4EE13x7JOO99	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1832532.987108	CAEP321ib24fCJHyBi	192.168.1.122	57160	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlwVxZ2JEyDs2ov714	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1832675.306404	CsvnEP2nkUQGSBXILl	192.168.1.122	57161	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkW1gE4M2GkIL4XBsi,FecQ6X2gXzosED2pFk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1833007.484427	CywmLh3W2PofjOHMD	192.168.1.122	57162	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZ3VES3dHH6LL5ZaOc,F8Ctle436rCV5Jw8b6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1833307.936283	CMbMHx3VlTdpOZqey4	192.168.1.122	57164	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcedyE3YTflXN7iKBl	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1833468.972713	CSC6397HUG6z4oDwc	192.168.1.122	57165	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FnnL2i4bGvENIwUDMd	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1833614.296233	CBvBwn3lcqesRbNmIi	192.168.1.122	57166	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3FKRE1mWH7mTkDrCe,F1IPti2iWkugi9fyFl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1833860.760840	CLv8nC305PUQgEb5Ch	192.168.1.122	57167	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHDz6z3mBnD97w0k38,F6aLyD2A8kaebFW541	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1834208.525552	CLTAZ64M5rzbpuDRf3	192.168.1.122	57169	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKSfVQ3vNTT75e0x9f	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1834335.579644	CyT9PE2a1JdoH9cns7	192.168.1.122	57170	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fwdqs64Ea9HMf4nVah	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1834487.902305	CdULrS15u7GMbdH0wk	192.168.1.122	57171	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGVFF4Whqn4ej90Y7,FgCSCgYAtzcVQahhd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1835072.583558	CjQxRZCQEKje5bQX6	192.168.1.122	57172	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQ9jtY2cOA21v6FI2b,FKtGsgLG3MUqMCf1e	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1835350.341585	CXLCuJ1hsLUdCe5ZZg	192.168.1.122	57174	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJvYmx1NIAb3D63S1c	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1835473.404685	CNU21T1LmbCaRQJx1k	192.168.1.122	57175	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fp5owW1klMFIzQ8DY	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1835637.725637	CdKf7A4pmWIkk3a7Td	192.168.1.122	57176	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKSqiz3CRnHwUEtE2k,F4ZKvv2nNz2pBveTq8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1836215.406484	C4vrL8btWZOk2F2E1	192.168.1.122	57177	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FevGPp3q4mFtCL8qy3,FsidTm3Lpq3V8PYkW9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1836542.199316	CCHJA12RkVsLnk5J0a	192.168.1.122	57179	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fldeco3n5NOno8ka8g	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1836677.316072	CfScys187VxZHNzSyj	192.168.1.122	57180	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcgEtdwgc8uC5X3qa	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1836856.648300	Cnt9lX1gh5cLqUBHR8	192.168.1.122	57181	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FI2dYWBM2dEqz4wh1,FEDMoH2NKMVXk7xWqd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1837499.322300	C9Z6XwMyXrcBHugF9	192.168.1.122	57182	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFVF311ymMMTaLH6S8,FyofgL1wKZVD38rNj2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1837799.106429	CBhgTRbvTsGznZKS6	192.168.1.122	57184	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FK4pJv1zDpRVEhqIpb	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1837928.174652	C9I6wJ2pkYzSfQbdpk	192.168.1.122	57185	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fp5AKE1jV56QKyYu7	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1838095.499216	CxAlfM3hMsXlaRjI88	192.168.1.122	57186	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5Ni2pRNkrC0ZGKX9,FdUL621nPSN5Hd2Vqh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1838339.670676	C796NzIjYkirhmwpf	192.168.1.122	57187	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZA8eI20obbp0z92Hk,FeHVbA3JBj690vLCKj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1838642.447631	C89tWb2AxnyBoM9bk2	192.168.1.122	57189	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6ZoOJ1Xs1RsD1OM61	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1838765.539144	CUHsNv1kLHyG73Plrj	192.168.1.122	57190	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLNEYh2UgHrbT2Tgy2	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1838892.865435	CPZLqO20P2HeYcFiX3	192.168.1.122	57191	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTSLuF1wgg45UzzKa,FyIKyf3RRafjAM2Wy1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1839184.044671	CNZPUn4SiGV0kHX6a	192.168.1.122	57192	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4w0ZV3ECCmBmzdGqd,FBirHO1jtHHvKbqzj4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1839476.875785	CFWzoTyECazzG23c5	192.168.1.122	57194	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQSms812bgwjGSo2I6	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1839601.009452	C0QJU41DsgLULRscse	192.168.1.122	57195	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8oddJ3ly2nDjU2xwh	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1839725.332641	CVnhcJ2BrUm3936kri	192.168.1.122	57196	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FihbgM3LUFTMBJR7B,FgqJSQ3mE9XQ4L2OLb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1840272.018618	CdfllGWSe8ZamjXX	192.168.1.122	57197	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4XKnE183MfWkjTN38,FId0zd2zXJRFq27U7a	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1840575.780259	CENqQXjct0K5MXJ25	192.168.1.122	57199	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAg4c01E8xOCa90NT1	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1840708.842363	COX0tX21EU9gRrXb6g	192.168.1.122	57200	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQt0Ah3rcDN0mFG543	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1840843.170133	CTaSty47fQbIbSPHB	192.168.1.122	57201	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fcn9216qzK4RQLUo6,FsSAFf3Y5NpP0AZU2f	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1841398.838761	CrUfes3FNaDOVmV72g	192.168.1.122	57202	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgJAAW247JYB25Ihth,FpJxkc1LOny5FNZuz3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1841662.632635	CJ6QjP1IbHpVguKjyd	192.168.1.122	57204	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFM7Jo2P1iWBtpHTR8	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1841803.736776	CdUuNMO0dmufsOWpa	192.168.1.122	57205	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtDCdcQiftBYILJlg	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1841973.064296	CKhdva4eKgHozKWVt9	192.168.1.122	57206	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNEGRu5JqIq3JlcHb,FU4dte2kkVGYIB7ruj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1842597.742381	CvIGbV2J2HyQIVaqc1	192.168.1.122	57207	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoMOjN3hknNTlTFpmb,FhTsKX2yaSH5ehYFUa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1842876.235210	CqP53hBIDD5Gku6Uh	192.168.1.122	57209	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8Z77a2OOv4br5H1Sj	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1843025.312902	CYuVYj2YTTi2Uu8Ndj	192.168.1.122	57210	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fxcgg02C8pezvzieN4	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1843166.640479	CqVTps3huj9S9Sut0a	192.168.1.122	57211	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtzqpJ3qASAFtZu4c4,FtM67U1HLQgkFehQt	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1843729.319391	C8KjQ01KOeR92YqPs9	192.168.1.122	57212	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FV1wl72PfDMmzhBcXa,Fk4rk3ahCBFow577l	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1844042.772839	C90WJCwBLyiZID9Ec	192.168.1.122	57214	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FubPTO2zEKte194cR6	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1844217.827669	CcNZH22bGfamlgczZj	192.168.1.122	57215	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FD3PZolP3YZlt5ryg	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1844369.160257	CHwhrk2OmUQTqLVPLd	192.168.1.122	57216	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQJxpj2dUMlRv7pNkh,FSnRNe3wYGWfuTr0ij	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1844699.634958	CDQU9b1WZVlVJiDPxb	192.168.1.122	57217	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtxP38o93hhy4Cww9,F25VDlDZL0FCNgF5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1844967.449903	CrGoIz1xqiphz1tms	192.168.1.122	57219	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Filjnh2umIJyub979g	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1845146.542715	C9PGRo2iFnGjZmUzp9	192.168.1.122	57220	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcskzQ24oF1FTO7KWb	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1845270.865630	CmF1HuH3WNQeBlXnk	192.168.1.122	57221	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fv5qxsquHuGy6Y3Li,Fqg1aMB79OfnM02Ma	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1845599.037916	CxINUc3q2ihKp3Bwi2	192.168.1.122	57222	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZZBXs4DdWGZCxV1L6,FvheGi12DhYl27dRL5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1845942.824824	CUNUcQ3gHU0iXIsqg3	192.168.1.122	57224	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJUQwKgjUTfrHeSi5	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1846105.932815	COQgam2auq5od5Tfd	192.168.1.122	57225	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXEzud17NUJo31tm3h	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1846231.256641	CKidiZ2TGp7t1jz2Cf	192.168.1.122	57226	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLhiF6rXaajM3Z3el,Fd6LScqY1YYV5bV2j	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1846890.935483	CqOWbM2jhJfDrndVC8	192.168.1.122	57227	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHGc3y362xeIKSgP0e,Fo37iE4iHM7ojHpKAh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1847209.711223	C6E15I1hUQ5hh0y5vc	192.168.1.122	57229	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fd6oHM1Xe9sN7IVWZj	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1847374.796382	CQhXG23TM4zZXcOiA	192.168.1.122	57230	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0GDsk45m44cIti2xg	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1847495.113735	CiNbFv19DP2tF3U7ri	192.168.1.122	57231	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FU3bUM2PTgmvnxo15c,FkNqcp2nGHkZ2gYo4k	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1847823.275646	CiyGOp4NEtvpKz602h	192.168.1.122	57232	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaUwTq3fBM7TDQe8ef,FOw91r1bIsChrJw0If	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1848097.776519	CDUtCj2Zu2l7fPNise	192.168.1.122	57234	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FshpsG3mIM21PQKdQe	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1848258.867265	CZBxgq36YYjXD0Udka	192.168.1.122	57235	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxO1XnkkoWb8t7lMl	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1848384.192807	CPexrC4rDfoIOeIcGj	192.168.1.122	57236	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLm47b4WQmhicL8Zgk,FM7ZYO1cTdkzmdIPBj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1848939.871968	CYF2Kq2gd2qPj7R0f1	192.168.1.122	57237	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FefqAI3c3yYOLUsXAk,FeIkeq2Ij6jmeTvUS6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1849249.648440	CwfLyB2avHG4UdEskj	192.168.1.122	57239	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwUeB32hMe9m0nLt9b	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1849415.711807	CMsVlKr300NUs5VCj	192.168.1.122	57240	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGfnNZ8R7CdpcDU7l	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1849576.025700	CtQHEo3P6iLfK0M5if	192.168.1.122	57241	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMoUNc3WhQjxt2TZj9,Fnu75kwBxcMmnvHqk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1850121.700704	CMOAea2OhVWv2l6HRh	192.168.1.122	57242	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiDG3BGDPZpulSpZf,Fn8iBvJ74zEA1BhW7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1850468.450737	Cpd5dj2w70Dx2NAEta	192.168.1.122	57244	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNvQoc4aHPPHRW5FM	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1850589.498730	Cqkpor3zooSK8xQdZh	192.168.1.122	57245	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FFlf464NRnI8kNOHLi	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1850758.816184	C92bNq47UNQPoM5Vka	192.168.1.122	57246	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fh0kRt4eLnDsagiac6,FurQmj3ArXTgYmrvee	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1851373.490190	Ciju1b2F840TreDBPl	192.168.1.122	57247	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FD7nKWz535YfJcgV1,Fxgtkj4SO18v51KTUe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1851652.295922	C79ur54P6r80JRGG13	192.168.1.122	57249	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FaE3cS2uqBVwM6iGkh	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1851783.412119	CKWqia4zI4rgn2Grjk	192.168.1.122	57250	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDee6A2vTrftpyBL6l	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1851933.745808	CV2H4b3TA99DKoteT9	192.168.1.122	57251	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1wiih3AYoyCl6e7Zj,FESzipl7LV2TxeFgg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1852541.416117	Cyyns73SFLxPBFCOy2	192.168.1.122	57252	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fr28fJ2yq2MhmXG7fe,FXHiuN17avoWZMT1Md	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1852886.890613	CYYy8SdrMSZuoHdgl	192.168.1.122	57254	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnP1IE1EBgJCuotb0h	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1853051.958970	CgU6iUsU3VVtjPdPg	192.168.1.122	57255	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5JQ5ADPXwL9StS7b	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1853215.278099	CFkAnR2r6RtZcrz8H5	192.168.1.122	57256	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAqUmq4bKiS8w47EVh,FcSYUq3xmSi8DbAknh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1853773.951365	Ch5Ka73JeNxu3PdS0a	192.168.1.122	57257	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjTM7b1xGPBIz0nfM6,FSGtBa4yvNNomcxCZ3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1854093.738319	CZGwJY2vYnr3wT5Qca	192.168.1.122	57259	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZnaBxZjlxePcAFC4	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1854226.838072	CuecxtYC2Ij5iSxbh	192.168.1.122	57260	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwK9ic4Zwrf3URCIK	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1854371.169975	CeyFDh2D2vvNptUBA9	192.168.1.122	57261	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIkkW14QF99Ti1BTaj,FshlIY1130iwIQ6Iyb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1854979.845406	C5FbrM30iiba5jO6Qk	192.168.1.122	57262	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwMOGEi6zyc8Qr1lj,FHJ9Ve43wmuEKjtdVk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1855269.592842	ClC7UA2zyhhT5K5LGg	192.168.1.122	57264	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIe3Sa2s8wDbbgKky9	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1855441.654946	CxMd8G3DOqS9cehSUg	192.168.1.122	57265	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FK8LZD3pRIiRlvyFOg	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1855573.979228	CreYsC2x9SsjuaRL5f	192.168.1.122	57266	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVv3LO2Cq2TM7l2dH6,FzICNViI7ZhrucrEh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1855862.163681	CoSjQt2NSSdvM9vg35	192.168.1.122	57267	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmjPB5N8mOsdoJDZh,FvTndpCiJ68oJPCQj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1856170.936188	CEwLCp2WA5rmyyeSYc	192.168.1.122	57269	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fo7Wg63USAMFH28GLi	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1856302.011998	CSkRIM172O5HM6sFj5	192.168.1.122	57270	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrPh0H1HvZMh0OM2M3	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1856439.333521	CyeNtzALM8UC6AMH3	192.168.1.122	57271	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwNYlg1FYhqZKXSYt1,FIGoZ33FIv4hmXtPO3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1856720.507730	C9XUaIDgSvjYMcrkb	192.168.1.122	57272	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqLUVf20TbQ4wO4136,FfXqsa1xnU5PLw4SV5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1857019.296646	CysMCb4FrpGv5lfUb8	192.168.1.122	57274	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIZEpC3P8juGyd7Tek	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1857181.366107	CSASPV2TbgzoJfgDWh	192.168.1.122	57275	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWZf3z4qmEkEsqxsll	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1857301.693524	CpMcxe3bIBq7E7afv6	192.168.1.122	57276	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeLWlqUlhcQwiDZN1,Fyv25G2dBZCpawGvub	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1857910.358587	CzVf96z4inkeKQW64	192.168.1.122	57277	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FviMEf1zaU8o2lk4Cl,FIxCA51mGR13QjWAy	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1858196.130773	CUDQMA1FnaMQqK6kTk	192.168.1.122	57279	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpOLI7M1FbotwKzFi	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1858346.210694	CGDk0jN0iqPVUaGz3	192.168.1.122	57280	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FO3GQJ3uDAgmBVYyNe	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1858525.533224	CYSZFZ1nQOjqos0Z0b	192.168.1.122	57281	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFb8u44y39IeVgBqVg,F8B3vL2LGmeQdwm4Mb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1859112.206631	CXOkC72IGHbJ3hDSj8	192.168.1.122	57282	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIljPt3EIduqfD29wg,FcJyc7RALK2H2CcR9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1859459.967770	CsptXR2tsOA3vcswBk	192.168.1.122	57284	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAKLqu1dLUnWo2e0d1	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1859583.039089	Ccjdxl2O3gP9TuHdb	192.168.1.122	57285	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FCT1e23lo9T7w6G1j5	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1859704.358043	Cgomzq1CPWnIvhveK3	192.168.1.122	57286	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkBFWe3GSNzUREfndf,F0CZDC4RV9sqTfo4tl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1860265.024522	CMwLq71krxGXdszD3k	192.168.1.122	57287	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXXcsk3Bn9XBHdcHg6,FOON7v2Z0N93cjUlTf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1860584.529184	CaCXxC1dPieUbmZh67	192.168.1.122	57289	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Flyovu0mRYoYuoI9c	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1860755.625965	CuJom43Cl80TIItFD9	192.168.1.122	57290	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fgax88k0hR5UEoIq9	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1860877.955620	CgHQYa3oThcbINCBGk	192.168.1.122	57291	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgMe6C15sIq452VZBk,FV7DvT1JUVay8OdiMf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1861198.136364	CXwKSzyIQ4qjDVEDc	192.168.1.122	57292	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fphl2A2PG0sPwZG431,F4FLES3CjX6Sc8Pz52	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1861451.894564	CbJbvK3RgWpLfgQx96	192.168.1.122	57294	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FEeXer3SEWqNJ4QRmg	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1861604.926356	CisSSo1somO7Rx6OMj	192.168.1.122	57295	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBC3WT1RT1Fxairyv	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1861758.240820	CcK1XbE4EjZw7XqQa	192.168.1.122	57296	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdTQLn4nbFJxfKDM6h,FMbGAK397LDkLbKcu7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1862011.414947	CROK6e1G9Z7IQC5iz8	192.168.1.122	57297	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlkDh32k0okCcwC33d,F2mrQM1EgLnG1yImG7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1862286.863251	C4Zidz15sgy0AbDnpe	192.168.1.122	57299	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQrqXl3ROdWfja5Cb9	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1862418.896413	CSfVoh3YeWnicRhuHk	192.168.1.122	57300	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrrdDdsiGNq4kAiK5	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1862573.222706	C9LWiR35RfXgyFfzHj	192.168.1.122	57301	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQzrv52JVD9Qod1NQ6,F0mMGK3UTlz1HoRhFh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1862852.394438	CseFoy2h5MpzdZT5a1	192.168.1.122	57302	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcqqJJ2PFveenlrILe,F4bpJt4M6CxjmW8Ln1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1863136.209960	C7J4xJ2jxVlUqwA8nk	192.168.1.122	57304	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRGFTC1J9hTc1asYe	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1863282.327823	CkFQCe1P90sBUniKha	192.168.1.122	57305	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNKFCH29l5TFp5Luge	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1863418.648552	CC0c9ZFXk0EddDdJd	192.168.1.122	57306	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fa4y0p1MWE7VeyCM1a,FkGO7HzKnAknm2yN6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1863968.338607	CkZnY61aj7t2dhHDIa	192.168.1.122	57307	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoJEeB3FVoQtqhh5Y5,FlVJZN31J7w7Hkewd5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1864275.818990	CB5mNi1XStnIE4ZUbb	192.168.1.122	57309	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHTl2j2UjdelQMtm5d	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1864450.897838	C6aY6P8voz5kddvc2	192.168.1.122	57310	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FAsaNp2u52Xr3h8Oga	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1864618.222894	CAe1zyUIIGEfCBuH2	192.168.1.122	57311	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJMXM41PHCo0LWWM9d,FuTe1a3ldFABsjuJyi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1864905.405951	CZLu4936Y81c9vMl77	192.168.1.122	57312	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0qRK12KcOlOSzkDMl,FgJGExsoIDPahW7ph	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1865214.166997	CS3c596SDhgENWTia	192.168.1.122	57314	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZ5FHCGTf6ikxem0d	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1865356.229804	CS6jpn2wLJL9DaVsj	192.168.1.122	57315	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRoUSs4su3fYuNDmoj	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1865485.560360	CiJppb3JRiY14deUIf	192.168.1.122	57316	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCEFob2BEM0HdtmLt8,FbKPEr41HOP2EBKOk7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1866055.239142	Ce3AIv4CrtJdNfKtX9	192.168.1.122	57317	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fkb7Gv1DDZwHEklGT4,FqStzv1qjfd79RxOt	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1866371.024516	C6FuHa24IoX2rrpvI6	192.168.1.122	57319	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FG7Pfk2CPhtN91kQx	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1866513.112933	COzahmmeTq3ccxFv8	192.168.1.122	57320	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7tkMy1Dcuxsq108X5	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1866661.430682	CHw04447iFFpTn66sg	192.168.1.122	57321	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeUlcZbQWmSSMIub7,FWOz7bLZHQ5dYagN3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1867268.092918	CybeZ33uU5lbz7aEhd	192.168.1.122	57322	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5G0ra3avhi3Cl6l25,F75y8V2j1E4DizF9Oa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1867546.851609	C8IQls1CUe71o3ugq4	192.168.1.122	57324	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FS8b2H3mS40m1whFkc	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1867721.901193	Cpa4UxHgGZ9x0yr23	192.168.1.122	57325	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FzEMBl2UlXSBXaW8Vd	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1867842.218270	Cy0d7N2n4Bt00YJqt	192.168.1.122	57326	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzNk1q2FD3RlRCxOF5,FW0Xxp3vFgOG7fDy7i	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1868408.883111	CHAsph2ZtyIV6KmZeb	192.168.1.122	57327	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcVKHf46sW0ikS97K9,F1rb9h1vbdLMRfAp72	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1868690.667862	C3RxuX3s7oYj711sYi	192.168.1.122	57329	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXWx4M2F1EeENA5TK8	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1868848.731176	CeIfAb2QRfphJDjJOa	192.168.1.122	57330	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2Dl9b2o4uavNNxaah	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1868998.060235	CGmx1o23ny6NVWh0qh	192.168.1.122	57331	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlTa9P7tWpc25gFo,Fh7hI43jTKYYZqKqK2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1869564.744987	CdGHZC3pShBOeuM0Sf	192.168.1.122	57332	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwJ2FGkVwIsWXdQOj,FtXQFJ2yDS1rdFIUyf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1869895.520662	CXeeCk2g5uCS8nkRj	192.168.1.122	57334	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FiHpm71yxEfKiVtHK5	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1870025.573910	CY1jw33uXkJ5xs6m21	192.168.1.122	57335	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FbdDyB3akxgPTTlOn5	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1870190.905263	CNJGDo2gByajMJ5cDj	192.168.1.122	57336	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEUUnB4o56x5Z3TPIb,FlEcF94JN371Y2GHNe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1870843.574138	CUQUse2f2hsbnpdQj4	192.168.1.122	57337	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTGj8Q22uurfFMmO78,F8unipAuUPqo8BCpa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1871187.363018	CyM5Hs3inj9qAe4n79	192.168.1.122	57339	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FuxEaF1aARNx4fQUS2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1871341.455340	CCOmETaFyOPrwBrMj	192.168.1.122	57340	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUhoR54TeAj83fmypg	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1871466.789632	C9P5wPsiqfHtJy6tb	192.168.1.122	57341	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRvUIt14wJ32z0hXN7,Fv4W611nO5Yzx91vMd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1872094.482156	CnekEcbi4fAceG5k4	192.168.1.122	57342	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvI60e2FD3oNBDFTO5,FwCjcg4s3YvukU2kda	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1872395.270807	C5oQAX1dv8ijeP222b	192.168.1.122	57344	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FEfpCASAgDsfcTEO6	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1872549.342011	CGznV915z2FSeyEYf5	192.168.1.122	57345	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPq7CW2FCENFs7mw3d	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1872716.657053	CzI6OtupkLyhW77j9	192.168.1.122	57346	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHGm7F30YkoKqS6TAi,FOiPUn1LV7EstR1OD7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1873359.340773	CppYiy3c9UyQ1rPTxh	192.168.1.122	57347	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyZZUr3qIBlS5rhUjc,FXjlzI1wqbqWMilLx3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1873676.121175	CEsbKl29XE4qC3dsZc	192.168.1.122	57349	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FeLpmp2IrjaEzuW9I7	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1873830.203556	CI20op19Ht9fPLduXk	192.168.1.122	57350	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FX7M1D4zQFtKHbncZa	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1873951.532169	COWqrE3xI1yD3f9n3a	192.168.1.122	57351	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgykWyVbB1jgRVDLf,FgNj9k4UZ6se8qj7oa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1874540.228749	Ce4TmT3rbDcdot0YNg	192.168.1.122	57352	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFD7yLugw5CCtNQT2,F9lc554esM7OyENsWl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1874862.031119	CWQ9o23yhCGJnyOAYc	192.168.1.122	57354	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fdk3IC4UaZnPJILPq5	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1874988.128585	ClWw8t4Um9DnxyBg6f	192.168.1.122	57355	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBpNCE3tqgXws4tQah	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1875158.457457	CNNrDTEMfRuDALpq8	192.168.1.122	57356	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4EmQH8qkJZphCURa,FKd4CziuJ4A7soAu	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1875714.146492	CAbZsj2ITj9D4l5xdg	192.168.1.122	57357	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWHK46304ygj5ZbW0l,FLsyGyjt4LT7z6Xhi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1876028.906931	C4xhLr3UfwwcnUtoF2	192.168.1.122	57359	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FE5NRa4U3VMeVJIbPj	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1876208.964764	CPprVW3iJG971SXqyd	192.168.1.122	57360	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWB95R3Z2cSvWRCJuj	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1876375.336426	CaYCRi1e9bm5gH43I6	192.168.1.122	57361	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fzpq593afc4uB4FDq3,FZbg3t2n2dTiVms7Aj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1877021.025547	CK0FUrJJqIH9amJj9	192.168.1.122	57362	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F79wk74izSZvAfHjS1,F7qVes2kC7Hlzn0I6a	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1877305.822962	CCtQg12MiGSgXpGqK7	192.168.1.122	57364	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPZBwg4tcuBzyeM9O	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1877448.906991	Cc6oeGRg4h78AcUdk	192.168.1.122	57365	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7kWBrs2UBk2kXW62	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1877574.240775	C2uqze2EcxxiOOUHv3	192.168.1.122	57366	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQVYgt4qwjToDlCsJ8,FTMCjO3Kj84PsbMIPc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1877818.722499	CKIPSz410SpebWqu13	192.168.1.122	57367	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzN0qz1I7SV4Xa6cPh,Fmy3wlbx05gsxX9Pd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1878070.507069	C2S0R3UFv0sJjiRdl	192.168.1.122	57369	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6Pew5aWVCdhCmza9	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1878196.592583	C2PGMk35OMTuiXPnab	192.168.1.122	57370	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FekFja33XOYBvbBbra	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1878341.924713	Ct8mBi35bxO9fIDqTj	192.168.1.122	57371	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJxONb3zOGba3Ig3K9,FSbcMS22A4NwQeaG0g	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1878994.623648	CSatZB3F3tlFCvOQMj	192.168.1.122	57372	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsdLqn2mWSgE7dtY0g,FhqMHp15jovvQC6Vid	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1879302.118352	CvTfNg4Fe7mDxqZQ8b	192.168.1.122	57374	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMs2Up256UbG1yJ9Df	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1879453.228225	CkzIur3WB29Wv58Glc	192.168.1.122	57375	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F61pYq2p7mPy7UUgEc	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1879590.560028	CJN8jd2SdgePFkfnv5	192.168.1.122	57376	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTdAd548qLI1mFJhP8,F1jFuM2RAxGQuIOTxe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1880226.254120	CPiYSX1CjNCusVsOsa	192.168.1.122	57377	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQUtQ24wOC28NKpmO2,FMsgkJ3WUgE2gHYFga	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1880538.017940	CsitgT1ii0cN0IZEpa	192.168.1.122	57379	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fxa8Kr6rbKYwELxqa	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1880695.094170	CGpBXm2JqC5Kp3YmE7	192.168.1.122	57380	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRQctV2K3dg7Nt3O5l	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1880871.431540	CixhIoRcTucih93z4	192.168.1.122	57381	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4efBn2a20kaR1DP73,FFgM1ejeYnABckJIe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1881500.125362	CwX2cN2ZTlLxleTkWl	192.168.1.122	57382	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUp75pxdQ6mA24oZf,F3JudQ2gAN8KawQLN8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1881809.961127	CUzWRA4qe4Uph7oe88	192.168.1.122	57384	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FttjUj19ETh1a6P5O8	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1881977.117078	Cd8ZY02cftZBFGD7c7	192.168.1.122	57385	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXZLLT1qoI0RsVncs9	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1882153.434664	CAegda26qAtTUgevo4	192.168.1.122	57386	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fb7Wkr35hx3L1CSQd4,FroCW5G4AlaXrlEVk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1882698.128008	Cw9wODNTs3dVMOPE2	192.168.1.122	57387	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FM8Fqc3Q1fgJXHkwn2,Fh1ifg2Emtc5EuGJ2e	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1883003.915598	CCbofs3erQ7bu26fSb	192.168.1.122	57389	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FfvwUB2p9NLmo4x5j7	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1883171.994739	CeWenn4T3EE5oHHg9g	192.168.1.122	57390	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fh3eWv40txGq3NptM5	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1883316.326655	Cp9rPK1gGldWkHDKvg	192.168.1.122	57391	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FThnPX3wiM5jaijWpg,FcBw2i3HHiQ2p5GK3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1883603.809973	CmCbc8Xj21wrA9nz9	192.168.1.122	57392	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqPfo7iYOpIAarIe8,F7jO783m1kBhjdOIXf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1883932.597715	CI34oG3oniuZPBbkd5	192.168.1.122	57394	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FOTnqB2wLNvS9LsUhl	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1884061.674389	Cra5Gh3ztW5CYKln74	192.168.1.122	57395	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fpf9ju4qgKtbMgZsAb	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1884190.002815	C5eMfi2EOPBue2LqDi	192.168.1.122	57396	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9dvRNEvnV5t7gZL4,FdHrt31mPPbLkn64te	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1884782.705165	Cq8cko3Im8wgTAsV6d	192.168.1.122	57397	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPhLOb3zhj33epBLP2,FPqFzz3ETnuoqnnJUf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1885059.492197	CpnsFN131duRuXxnG8	192.168.1.122	57399	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F25F5v4lFzozenxCjb	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1885203.595859	ChQ41HqrWjD0Trugh	192.168.1.122	57400	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUfcbN7YL0MQajo6	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1885353.926371	CM4GdOF6pSenH1yda	192.168.1.122	57401	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHFKGT1wRH0KhYzd7,Fwvj2H9Lcb2VDmLyb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1886003.601285	CKNUGW2RmG7xbOH5w4	192.168.1.122	57402	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKWgPs1Ow003TJ6fR2,FdyVyP20vthGFIbcSe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1886290.404444	ChJFhgVtg0MMskISh	192.168.1.122	57404	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FoLHHx1GVOj0XWKGyi	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1886455.516296	CTr2P81jTmxp0xidFg	192.168.1.122	57405	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FablQYVVufd5FOXvj	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1886621.839382	C5kR6HxgHF5r2oTui	192.168.1.122	57406	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIKZft2cjwAx33k2k1,F3Zc1ZzSp9L8TVX6e	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1887208.503010	C4suz72Xhahynh8pM2	192.168.1.122	57407	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMoqD43mFB9csOZMk2,FUGtdv18gzU3D975N7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1887483.287060	Czvtkz4r5zo7vK1QY6	192.168.1.122	57409	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FyDERa3gnyiiewskme	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1887650.394481	Cwbqox2mftd3yZmrF8	192.168.1.122	57410	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FagF6m1nKMQuC3Ua64	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1887811.720199	CL70k34tmxJzAkTGS9	192.168.1.122	57411	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGcGvz2OKKCe9Ut5x2,FXoNNe1GSOlZh2YOrj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1888455.396329	CTLIx1xCA6wFeq7sj	192.168.1.122	57412	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGrNtdxNs8c6sgFdj,FpU55p2i70bBkD84U7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1888734.166966	CLBK2W1rMunAQmd3q	192.168.1.122	57414	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwbvtL1yhZfgow7bw2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1888903.255235	CJFoVRMFFVzQ1P5Gk	192.168.1.122	57415	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNGBjO1qheDyr6yUyj	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1889045.584154	CEKT3N3vNUlb5I6Pr2	192.168.1.122	57416	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FntFvL3HwH4PlzVfg,FH9CtJ1eQ5nMP15vw4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1889312.748154	CNk6zy19RQk3ezLm15	192.168.1.122	57417	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmBZj71r1vhrVFKgy5,FAtp524rNWb8TMYHCa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1889600.539358	CwC4kn3h2RqoYAV4D8	192.168.1.122	57419	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwnsIy1x9AseKhMF2f	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1889761.609709	ChlddclknMpIhUIX1	192.168.1.122	57420	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLtfC14RUAE52gWuW7	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1889894.925375	C7maiz1mDRHxDX4nxh	192.168.1.122	57421	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNuHlv2wtuBT9S32Cg,FY5kn31ezYSSeoXHg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1890530.609249	Cz1wmu4tpgGD5TwCj9	192.168.1.122	57422	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTVm7242wgVI8brat7,F3yTYr4ixLYiSN2Y9c	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1890797.375407	CqI8Ty2bOoZFEuFFZ5	192.168.1.122	57424	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgPqnK1KILoU6Q2BY4	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1890919.424456	C3GqUD3uLkSFtz8TDl	192.168.1.122	57425	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxWwKa3fvr0i9qAhP	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1891061.742815	CjYeqEE9PA4DAXeq9	192.168.1.122	57426	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQVmF24HzwHeQx7EB1,FJGTXX1Sn4WaRmbgt	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1891602.410248	C4y58A3mtNOjZAnR2d	192.168.1.122	57427	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCQ8w12XZqVtFAHVg9,FTtyra3Prab5OgQ1gj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1891917.185566	CEfut64gnezV2WSLYd	192.168.1.122	57429	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbxfPt3GhEDb3AVnO8	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1892060.274203	C8Ppe23kk7m3pdQPgd	192.168.1.122	57430	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdI3GS2AAY9VRHgMk6	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1892198.607383	CrW3iR2YHteLnBRAP1	192.168.1.122	57431	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZ6JWv2ChAX6IKKgUk,FJFUYy3KulKyrymnwk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1892797.278284	C7cEz64cR4K1qvZ1Jh	192.168.1.122	57432	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcfYBGPion1fZSBG3,F4R48H1iuS2RBFb29l	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1893098.036703	CB8X5o4sK6IXJ2bwyd	192.168.1.122	57434	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJpVIg1Fpo0KMha7Ca	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1893244.497509	CJ9boC1ipmrzJft4qd	192.168.1.122	57435	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPea3lb3WgHtSfKA3	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1893407.815901	CYJhRXYfOA7zLebsj	192.168.1.122	57436	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYmH4w2j1e0639Au72,FitVjp1vGth4D0vbXb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1894065.480816	Cu3snZ1iy6affZ2jO8	192.168.1.122	57437	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSScwB1FLtTJ7ZWI43,Fv2zfs4LDheYPPYaA8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1894350.267174	C8z1Fs4Ayoz3AjnfJa	192.168.1.122	57439	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FA3i5G49MXpFvSFLr5	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1894476.337909	CT8I5X368oMZFwhRwk	192.168.1.122	57440	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3nJSs3rTtO6lYsho8	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1894614.660978	CiJWDQ3dNzy2BKBNTc	192.168.1.122	57441	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fkcfvp2fuxaai2AQE3,FPfFnB3BjFT92uhzm7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1895235.323615	C9oKzW2qB5WZYpisO7	192.168.1.122	57442	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIAgMn3AaKgDgULXxk,FhHkoc3oNIbTwVzWua	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1895556.096808	CvsQcr4gjO1qSotWC7	192.168.1.122	57444	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmGirL33Gn82aMw82j	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1895704.323393	CdG0Mb3tQt5PMlRpMl	192.168.1.122	57445	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FpnlOS3ZwbdHAujQej	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1895857.828694	CplIUyhLmseB2kcsi	192.168.1.122	57446	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fosje01CIguVhYQ8g8,FcMlQu2DCEkWimFIbe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1896151.991810	CrdzWQ4g0rQmwTHh4	192.168.1.122	57447	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFTJSD3cJ5If2XCCQ,FOXiZV2NGEMeLdge6i	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1896479.749072	CaWImRJvtaDooH21b	192.168.1.122	57449	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmBvhvYtU26CHpFRc	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1896612.809626	CVgVLW2i56xwdlwMD9	192.168.1.122	57450	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fo3IXm1NhXPVeb062	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1896750.141550	COG23o1gfd7W9RoUM	192.168.1.122	57451	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsRgAM2camEjBSiNd2,Fo1acl2nJa5n3ebpoh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1897294.814803	C4Y9fC4CvUcIHq28ah	192.168.1.122	57452	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZon2len4aLqpTm62,FqT6Ue3oMVkJDBMNN9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1897581.599265	CFFOTX1NtX0Jr8FaQ5	192.168.1.122	57454	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0Mgsf1QnQQCYCjytd	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1897736.655759	Cnn1LA1Yo6JY92bH68	192.168.1.122	57455	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9S8Mr3cJN5SWDrqJ5	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1897887.977429	CwU0z322aapS6eJp2f	192.168.1.122	57456	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0jr2H2vSAYPcmrG26,Fcym2AlaWvRioRG6l	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1898530.641544	C2LjKh4TMxQxEeKPJl	192.168.1.122	57457	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fz7E0o1VLKEoVK2dp1,FIEI9721aaIvTLCFlh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1898812.429307	CNVbNu2WbyjM6cBKj2	192.168.1.122	57459	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FckT7E3XXZw2xyXDJ1	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1898944.532713	CYic5uWR4yy7NcVR8	192.168.1.122	57460	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgjqfC3Oay79js2wci	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1899096.855735	Cyk44QGrD6itebaFg	192.168.1.122	57461	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F69UuR2s94DIIPnzfd,FCoRsv2nDXpJYVtPZ5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1899734.533008	CZdM5U14rrPGQPYmab	192.168.1.122	57462	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbJyS625CTDsXw7xi,FXlj0d2RY6IXVPCdBj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1900037.306831	CHrZuo3E0zsQPC5xP2	192.168.1.122	57464	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fl4Nsr3GtRqLgHMcge	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1900191.395012	CFMO2HPOKnZWscQuj	192.168.1.122	57465	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLrp331sds2vwJ0LHl	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1900364.718858	Cp2sRC1K7Dd7crSsAh	192.168.1.122	57466	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMD2Rb2g35bHvV7M1g,FQvIyu3OXsh52YYAca	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1901008.384676	CQY6rv3YpODjaAxZLc	192.168.1.122	57467	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbVtgg4F6EP7fcjnWl,FOpAZ2fQZnBV2zg9k	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1901301.148291	CwT5GD1v8s3fu7Wx3k	192.168.1.122	57469	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbQJET1fMbknlAEB9e	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1901454.180425	C8bi9r13Vn9DE9dOBd	192.168.1.122	57470	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDabCS2G7OlOP9AXQ9	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1901628.495800	C57jnL3VOePueAini7	192.168.1.122	57471	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpTFV13TJU6U57Jn6f,FN9FgC39WNHaA1PITj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1902271.169682	CQt3k3ibQXEiUewFl	192.168.1.122	57472	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNwwf14nGKonhxrO33,FnIIiL1AikNzt10Cn	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1902618.922497	CcTio034mvLagoPVv9	192.168.1.122	57474	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3oQcsSOualIlf1kk	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1902792.995858	CJ5DX6hGpYQyv963f	192.168.1.122	57475	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWErtY1OzV5VMcVxUb	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1902950.316413	CUEuxi3EkcS6ue8Ona	192.168.1.122	57476	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4Jqos2NE3G9wBv1a5,Fawmuc4gcQyANcZOV5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1903492.986325	CjmF4N2IhG2GT5Ljdb	192.168.1.122	57477	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuZw4i253roUA5bXLa,FZPIZx1hxYGSXzGG5l	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1903785.770945	CwPKsC2MMBSK4eFlP8	192.168.1.122	57479	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FklPdr35ok3A8fxFP2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1903941.837288	CINxSP3XxklEXXY52	192.168.1.122	57480	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5b1BcEXlVu45sSd8	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1904095.152314	CgyLlW365qF9dIHLJa	192.168.1.122	57481	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNMRKo2F9Rjg7aQNm4,FaHc9qTH7xzYwQtig	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1904671.834276	CB5Moj3nFHcXh4M3Se	192.168.1.122	57482	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FI1kJG3ZSMdPWXDqPg,F48QOrFWD1x8yEqge	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1905012.635274	C58BQ1fr8rnKeyRwf	192.168.1.122	57484	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FkESM51jOQi6N1kdC1	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1905177.804126	Cvom291bIi2vtGFZwj	192.168.1.122	57485	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fd7jCq4gkaL9i5ef5a	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1905350.126540	C5kDNYP7hu0Z48PG5	192.168.1.122	57486	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFStm122jqR1LwhAzg,FCEEsJSdE5wRaOC1i	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1905970.788874	CFAPIb2b5oLneYREYj	192.168.1.122	57487	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKYFXE2Wm83Ra4p5Ph,FME7cu3ypLSIuZD7X7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1906296.581350	CY9AWo3zEqrpl0NZQe	192.168.1.122	57489	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F96UBi4J0Qw8bZKwB1	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1906418.659170	Cn5PWw4QrefuRzXoSa	192.168.1.122	57490	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FezGKYgYs1YPKh7d8	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1906563.991674	CEOp4b1a4SNaaylyS2	192.168.1.122	57491	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeYLV42id3hzaY38K,FUn1Pw3OKh8lnBK5Pc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1907115.655217	CNoxvm30F1oBmsAEhl	192.168.1.122	57492	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fu8By63fRPGwOOm1zg,FE6Vht4FkpzcbqqAF8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1907427.446747	CLCBrIE6nMeoUDMYi	192.168.1.122	57494	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Ft9m6d1EK2DgB1KaD2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1907564.556830	CPpJdAE7qUSBKwDhi	192.168.1.122	57495	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0DZBIokixNJTJEL2	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1907689.880451	CaFaP3135SK1j2Lzsc	192.168.1.122	57496	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMZVim4nsQZ7AmN5ih,F86Hwm2UU1hriHC8Dj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1908287.550248	C9gykk2baTSL5EnJwa	192.168.1.122	57497	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVZNC9pVh9WwJrbuj,FfKngR1TfHPiVpLh85	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1908607.340352	CFKoxUmxprOTfOLU1	192.168.1.122	57499	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FFuwAK60jUCl0B6g6	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1908772.412637	CSDf9ZO972zhylWFc	192.168.1.122	57500	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FVFCuw1b2GLydw5zG5	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1908945.746237	CWFbFF3S9HSFb9Li98	192.168.1.122	57501	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5yRpW2OzqxhmDuWub,F4U2Pj37PiIAANOWLe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1909548.423587	C8Xjxw2DBzqL6SAHJi	192.168.1.122	57502	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8Zmbc1aa8Ng5ZabCd,Fyj1Eh1FTUqoHE3YA5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1909811.902995	CYjxd53RliELKBmbc	192.168.1.122	57504	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FSiWWm1yp5DhcO7GT2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1909938.990505	Cznzpe3u1jIWXiB24c	192.168.1.122	57505	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmhAel2uJDzk5U6Atg	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1910059.317213	C1vobT2KmPKRRQJnFg	192.168.1.122	57506	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqhUr41fGFY8vfHrg3,Fbs1Ak4tQe7B60Nbh7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1910647.993720	CFWKX74GJHCgMyFixe	192.168.1.122	57507	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGKNnv3AmgWJRCAhW3,FdidY139PrteKJzK2l	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1910966.767881	CsmlkL1rJbp0FzIzpa	192.168.1.122	57509	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F90VgPbadII6ZmBO5	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1911144.833722	Cgfd7j1gXyyUSKZWQ9	192.168.1.122	57510	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOurJOUda8QsFMfeb	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1911311.157242	C3uUv71LVRrxgjWvGg	192.168.1.122	57511	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FieV4G3ZNhY1n4Xjrb,F0tdCv3qvYLta4LJWb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1911906.833544	CpvZ7WcqZ4nIFdV96	192.168.1.122	57512	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ff5KJY2oHniRj9nd96,FaEalq3yFmAhMbLtwa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1912223.594555	CSJyfT36m3mB8vpUy5	192.168.1.122	57514	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhOOt91n1MC20VAOsl	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1912370.666190	CBFu9m4qG7g7jSP65d	192.168.1.122	57515	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxZ8Q84rpTbogeY4D9	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1912535.988021	Cqmy2y3GP76rQ5gYx7	192.168.1.122	57516	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWMMZG1dnFLKGnGhYf,FgyHgN3DvbpfqvRtJ	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1913194.675755	CeQuen1oyI65X44NZ5	192.168.1.122	57517	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fup5lP1tLNKUey48Ok,FnkVcw4KFRYEChSJ0c	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1913491.154795	CumunM1Ll3rBAY07f9	192.168.1.122	57519	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fn1s8g3g1Qqyj1GbIl	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1913661.232002	Ca80104I3kxl069iEf	192.168.1.122	57520	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOdiOC1fmrJ01tcXIe	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1913819.554305	Cgytwr2atRx3dmNici	192.168.1.122	57521	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNTGzS3Ofe6ZCDJRd9,Fega7m1WhIiPWpqva	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1914413.237185	CmvWUg4o4e76JjQURl	192.168.1.122	57522	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMuLkige3xlVaspEb,F919de45tL35ttFVk5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1914766.014055	CXK71j2usSYDy8nxAa	192.168.1.122	57524	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7y2HnY4rEKQKpZmf	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1914924.107176	C2XTRD4Fx385z805mh	192.168.1.122	57525	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMn1yC3xYuBjftYyY3	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1915102.427406	CfN4zO21FI3T1wyq	192.168.1.122	57526	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPCIbN3Xwz8nAB5fRd,FrqgAr3BmaenFpNfj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1915346.599105	CIWuAt4EqJZ4kVMNhk	192.168.1.122	57527	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FC99dJ34MCSEzi4qxk,FUz4RcceLMGbwAJ48	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1915664.087922	CEn72d2SCboOD3xFql	192.168.1.122	57529	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8rG7L1pSTjrIezbq4	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1915837.170492	CLudFl2n9CwcNQtfql	192.168.1.122	57530	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNikez3W3mHCeTIyEf	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1915985.497526	Cndpov1q96tFApPFM6	192.168.1.122	57531	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFHwID35SrpQaOcIm4,FkIUTp1grocZzirdcc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1916593.171669	CptP5Qqd5TCibvCfi	192.168.1.122	57532	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUHlC819Jxt1yhB7ql,FUUhWJ2GX6YSzrxzFb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1916906.654142	CV3hWW19c6AEj1AbK3	192.168.1.122	57534	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FE4WVW3VG9Rk1HDtbh	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1917042.743644	CqLyV94z01anwGqAe9	192.168.1.122	57535	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdoBFe3bWmL6cEU4E5	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1917193.063928	CcvknV1y4XvgakyrRj	192.168.1.122	57536	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDkrff4v1yDMYMwZh6,FvVgPh4fnn2WLyVEde	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1917830.731249	CDMFt2VsHKMVoB207	192.168.1.122	57537	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEEBIT3dffnED0181a,FpxicV2h5TMaEZMFPk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1918145.226744	Cy9cIX3OYg9hIHtQ0e	192.168.1.122	57539	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FvTKomCRvtH2Vdav2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1918315.303278	CQZMf145zunEfebT7j	192.168.1.122	57540	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwY8Jx6crDFfTZ0Sd	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1918479.643552	CrmxDo4P8DqksosAGl	192.168.1.122	57541	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FX1UTlsWm9AQA7qA9,FTCyZT2rSCDyjSwoj2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1919106.315419	C6806qD4FP0nxxji8	192.168.1.122	57542	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FybwHn1ov253q86D4b,FPfWia4uv0bthPhTRi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1919402.810853	CEr1LcKXFnY2B1Ctj	192.168.1.122	57544	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZBllG2Y2RFpDM3dVe	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1919535.907839	C3kPaI1s170DAgznj8	192.168.1.122	57545	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUGRUU1nUkvLa7swU6	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1919698.225695	CVqWQALBS1EhsPVK3	192.168.1.122	57546	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fpv0KN2bpqHhWx19X2,FAj4KP36192zNfViQ6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1920244.891822	CnN2dO1Nz4BKSbPM16	192.168.1.122	57547	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlmmsKFVcShU3oNbh,FGI8ZI1IqlhdzC9E99	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1920527.398549	C4gKLN3NZNDyo24005	192.168.1.122	57549	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fqs8QsXgcWZ5WEzp9	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1920678.521288	C9123a22QLbbvfAgvf	192.168.1.122	57550	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIQWIW27fgYZVWKLCl	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1920856.841649	C2E5Nm1L4zIfOi6KA4	192.168.1.122	57551	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmXUgX3IeWgWa5Nc8k,F0Aq3k451SRsZFr2Vh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1921136.012853	C8e51l1HQOc0mkWlDj	192.168.1.122	57552	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjCkq21Ap6guC3RI5f,FniGsp3o5OP6UlLqm5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1921438.790896	ChsnG61L6t8Awikpc7	192.168.1.122	57554	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FjVbJG16qphI8ne8ad	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1921581.869606	Cu2vsX3Y54bLFAfCyc	192.168.1.122	57555	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmcLra3ZbEstJnF8Lh	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1921703.188743	C9kpvm250MrgDFUfIc	192.168.1.122	57556	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnUVnc34mfyWQYNNd1,Fa3REZ14Ncq3HzHoi9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1922357.879805	CGmRxXqvCQbAvSVJe	192.168.1.122	57557	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuCAQW3aYQLhN57Vvh,Fk7jT44KHX4xOAezck	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1922656.682293	CTtoC72RGWqrttIi85	192.168.1.122	57559	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXRLL62TxJqp8VI1U8	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1922835.782764	C0dLQF0TdEIYwPFw3	192.168.1.122	57560	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fg3TbP34sarT34PWj6	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1923009.106703	CldpH42z7YVz6PKR5f	192.168.1.122	57561	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fke0nI3xv8AiT6gCYd,FVKPZb10owzrUzoi1h	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1923629.768867	ClMxnWt6G1aGHmUhe	192.168.1.122	57562	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOttPF2gs5pZMWZ4Md,Fzld5SwSOWaA2FuD6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1923906.552796	CSK5kE2zcDIV259h84	192.168.1.122	57564	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5wNmme1zDuXPCwY3	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1924076.616373	C9m3Q5K4DoWM3DSHi	192.168.1.122	57565	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYNLtYm2NSatPORa7	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1924222.941277	ClzA1e3bq8AQvBLpH6	192.168.1.122	57566	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8cQWf2XgO6ztNVr7,FitxCc2XbQCnSvNLKf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1924799.620122	CjRnHb3742ENIN1ENi	192.168.1.122	57567	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fp1YI419gobJq6D8Th,FqMihP2Pe0KF3ST0ha	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1925067.443562	CkVwR84QT6Da9Efx9f	192.168.1.122	57569	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwaELs3GbgIH6GTEn2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1925198.570417	CEdkAS2qrYibKh06r	192.168.1.122	57570	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fxbx912NaBMMCOUVZd	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1925323.904051	CknK5T1TEPoxBRPMwg	192.168.1.122	57571	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FETNiM1h1VKwnFCXpe,FD6pUh2nuO3B5ohvC3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1925887.584715	CZgn9K3SQO8ibtdkIa	192.168.1.122	57572	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fdhr5HqCcEkrQFw4j,FLX8gV364kjyF6tff8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1926240.345018	C7eIUy2uVc33Klauk2	192.168.1.122	57574	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FxrUxj4RceSJFWFhX2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1926404.413294	CZclxA3RSbKHP5jjy3	192.168.1.122	57575	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3AIU3XAuaUqSvuAj	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1926526.733405	Ct0VRs400qMUwUemj9	192.168.1.122	57576	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDzCaw23P2OKslbRJ1,FEPk8U3KRrnKFftyW6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1927077.415377	CEzquu2Eh6DXpdYg4h	192.168.1.122	57577	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0PKp04eEIUpUhQ4D4,FOYFIL3e8eHwXJRQz2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1927387.158113	CSvxjj4qZnfDECBEIe	192.168.1.122	57579	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fyag033cffzRaPFYh4	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1927533.216545	CWo0Rz3bI79uftBg31	192.168.1.122	57580	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRZiv81yx6EtKC2251	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1927668.535470	CnAd5t4aXrJCUBhP2b	192.168.1.122	57581	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnaQAm2o28kJc4iErk,FJOcqa2cRblpJEiq99	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1928240.217345	C8lGPh2aqH73PVxDI2	192.168.1.122	57582	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrkxiJ1eSvRiRwcmK9,FVdTMp3J9HsHMbV8F4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1928518.040688	CHZTLXf5Ld2HBY6t4	192.168.1.122	57584	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4Tq7t3not9n66ONge	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1928673.168116	CW9mZx4hLzuOEwm285	192.168.1.122	57585	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FCIQAfwvXBnJbWVn3	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1928825.489333	CERHbo5AthFXx6y63	192.168.1.122	57586	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FG2qRI1DdAQ182eT21,FEbxwxOYvrxlhmt4h	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1929113.663052	CUy9gN1qFJZxx8f6Ea	192.168.1.122	57587	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FylBfJ2uncIBpZfkq9,FtOTlz2gh8F56kb7Cl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1929404.476117	CcTvH92wTDQmN8SBl	192.168.1.122	57589	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FojAF24VbcHTpqM89c	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1929559.589922	CfFwbf3w0PcSiqg54	192.168.1.122	57590	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F72aTj4xz63GpfY0z3	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1929723.920416	Cv1GWm2zmgIQDxFEi6	192.168.1.122	57591	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2Qn6W3nSaRqgzVfN4,F1sY9a2gxfcIv9VKP1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1930265.589498	CtLqPJ35NpxBIBNSmf	192.168.1.122	57592	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fg5x6Y17dlytGWcYnj,F4gMPe2h6d12f6tGIb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1930582.348529	CJqnuK1I7aBYT0olR	192.168.1.122	57594	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6ICc51CPDwVHNixC7	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1930739.406260	CyT74Sw1UvQvPk3Lc	192.168.1.122	57595	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fnamtq2U9tdJXWEgrg	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1930894.723918	CcXCbo40yIeqhexvEc	192.168.1.122	57596	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4Tb4ZOBAtwqs7C42,F5AIkp26RQ8IHNwr4c	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1931540.402431	CAxavOUPmgbmTYXC1	192.168.1.122	57597	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoZ9a71PqUvP86IHe4,F1X4UBZoynQuQL6qh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1931843.160512	CGElRq6ork6sSZCya	192.168.1.122	57599	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fheegyp90xmTmjBN7	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1931992.197526	CueeMmlD6vKp3IsTf	192.168.1.122	57600	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1BiIX1XiE7Z7KgLQh	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1932117.522497	CODddA1ceBnpzBNkj5	192.168.1.122	57601	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIa3i84jFLV47q9re,FCoEaJ3FtaauQWIrji	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1932672.179697	CDQnnW3S2J3xcUH8B9	192.168.1.122	57602	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjS0122FlPYQat3nwi,FkO7ZL1BYYKlAvh9o5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1932945.974140	CW2man3qOemkIIUj5k	192.168.1.122	57604	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmVQBB4wFOA6RWfCPb	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1933104.055726	CaQS3h4gfi3iAKmHxb	192.168.1.122	57605	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fhs4Xv4kPOkXDq6uKe	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1933276.388343	CUCU3F429flYPNY8Si	192.168.1.122	57606	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWOZda2BpcYCf9vMOb,FtwZXDKXScazhnG65	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1933922.066556	CRfS3B1JodpsAhYa36	192.168.1.122	57607	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F44LNg3ytNiivLKhL1,FBHmY91nkAoezJlvg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1934196.859990	C9VIiQ3Ozonwb5NEz5	192.168.1.122	57609	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnmY6o2mhh1rxDk91	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1934348.995628	CHyvYU14oWAybVp9g5	192.168.1.122	57610	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fgupo71wGQlLAwi1Md	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1934518.314514	C6woWm3hsbwzpMgyPf	192.168.1.122	57611	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ftw8eA7tI1VKzvha1,FErAxY1tgJrK2in83l	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1935146.977621	CvP4N53OspyhVEMqFb	192.168.1.122	57612	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlCoyE3rsHhm0XiELe,Fb14Ek1tOBerYy3U6e	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1935427.739818	CkRSR54MriXdROhaRg	192.168.1.122	57614	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNwKya17UINOA1NrSl	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1935566.816835	CT7tPV3EitpDkhFWOg	192.168.1.122	57615	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBFZf5G5lugy1bI6h	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1935727.141690	CDRSRf1qSVITcRar61	192.168.1.122	57616	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdHNMk180rTwBxS9b,Fa3IcEjFoNp1J1O5b	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1936346.823090	CVkK03y88oFo4qLVk	192.168.1.122	57617	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FibRDO2nLXE8psAKh3,F7KroB2pHzh4aHlWBb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1936632.285976	CUuwW4185BAptXiWha	192.168.1.122	57619	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8nZnv3gxkQeVrR4n3	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1936808.361938	Cltl9E1hjcRkUWdXl7	192.168.1.122	57620	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSmDvh30dYj87TRoy9	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1936932.695101	CvHqrx4LOSYMFZfZl6	192.168.1.122	57621	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMeJk1kAmW5AcZdvg,F3BUX022bCia1A0DJ4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1937585.383821	Cm5a4B4IKa4lsKrdu8	192.168.1.122	57622	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9QQcf2zbVk3T9FcAi,FgBFdb4ETBZqdCLX75	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1937893.175680	CW9VmY2FGUp29Hcwma	192.168.1.122	57624	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgXucQ3WRDfYrKtACh	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1938069.264994	CeKByt4yk2M4Hgj7p5	192.168.1.122	57625	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDv5jSngPDAmzmtPk	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1938242.588412	CUjuvY1M1RhiFTuuik	192.168.1.122	57626	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMcpLI30wD91DlUOoc,FTDsNl45X8dPNK6oH1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1938549.750209	CBxWgm469gMQlN9NM9	192.168.1.122	57627	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPOvzX1EVy87f3hti4,Fmnskv4bCJRpKJHMd2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1938801.557601	CCPqsi41zFHV7Yoagf	192.168.1.122	57629	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHkHW64AiDDbDfnOgg	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1938980.685140	CVSqUy4uLmGPUFeIb1	192.168.1.122	57630	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOyNmfxAWPCXwLkp4	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1939126.008470	CbAUne2ONPfxznQz7d	192.168.1.122	57631	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCOvKf4f531yqBziVf,FZcWM34Y5bUlwblatf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1939723.687971	CGHTLB1DDY4oujSLHc	192.168.1.122	57632	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEEgXT2ginzJP6LNjg,Fq8WnqXDniCcSUbS7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1940030.188059	ClXoOp3TlixuQDv887	192.168.1.122	57634	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUtuGg1Qra1HmzRuN3	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1940167.281478	C3TEgowBcqgs4l3g9	192.168.1.122	57635	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FCPCwj3OGzp5CPmcN5	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1940340.604948	C0rRSy3II0fWCiDAlj	192.168.1.122	57636	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8IcFB4oDSeSZH5pKk,FtCKCh21M7GO1muUSh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1940902.282380	C0hmgc4uoPmp0ncNMi	192.168.1.122	57637	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfkPmc4Ajo69eclzba,FmlOhlUjr4mPePiZ3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1941204.770539	CeP5173mayhBdJ9rma	192.168.1.122	57639	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmaPgh1MzTiuA44v3f	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1941372.924675	C1SRKK1aMVBYfMx9F2	192.168.1.122	57640	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRN2D54K0MRmj6SXm	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1941498.249644	CuYxShHiJ3VnwA563	192.168.1.122	57641	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FETusi2tgOH6fmqoV8,FvX8WL1XNDYQeFdoec	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1941818.720234	CSkb0N1vpqsrMJd55a	192.168.1.122	57642	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZP77K3xSzj9eoxp86,FvsIUa1JGiWSnpfAyh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1942138.198096	CG9dOi1AZoyVUjbPSf	192.168.1.122	57644	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlWVdApKvjdO8AuMg	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1942264.296907	CaUZGT12gEfQ2j7w37	192.168.1.122	57645	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Ffi1Dk3UtfFnLRNPVc	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1942393.626751	CizL35vKROg67MpO7	192.168.1.122	57646	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8GAd94DzDbbTYMR5e,FUXCvA2wJYWh19zJv7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1943033.296496	COr4uA4PmX472l8RQ	192.168.1.122	57647	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcZoi61ZUbi8HbaBK5,F5uF2d2JQwz52evZ53	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1943323.063614	CVufsK2cK5fEzd8KJ2	192.168.1.122	57649	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fn0TAx3x8iGiQ6UPt2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1943479.133039	CtztZT371n9UBiNVae	192.168.1.122	57650	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3ApOxzYlDCQaIsFj	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1943612.449118	C2Pxkj4kk7MLW9b0Kg	192.168.1.122	57651	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJr7NI2VXjXac8U82i,FuuGTCVgi5LpI6327	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1944261.121722	CIYXgZHVX7ZAmgZXg	192.168.1.122	57652	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQZ9bksbYJqxM1GJi,FPxYdj29ZABz55W7nc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1944565.927370	CWYzN44njvOg06kCLi	192.168.1.122	57654	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FeMzUuQ5dSYcWYY8l	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1944702.051290	CO1way1fPiYihNSoIl	192.168.1.122	57655	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZeJJQWxsJ7Sol06f	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1944845.381839	Clk07O20P3a5YSEbbh	192.168.1.122	57656	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fh0hYT2adnveXclTgb,FDGflw3JYsJsopKtuj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1945448.068493	CaojAbHvzM97IK6jk	192.168.1.122	57657	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fr6FfJ2ZQswWTX6Wj6,Fpg8K62v9HOotPWdre	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1945750.552785	CRqknf46EhSf6rxej9	192.168.1.122	57659	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FECAnwPkRl998jKp	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1945876.630793	CGbnNX3k5e4EtbxYGf	192.168.1.122	57660	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FV87Ce2PbytCvBUgFi	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1946048.952021	CWrjJV2gPwGljl7OCb	192.168.1.122	57661	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBhN2m9t7B6oBDUdj,Fuf6RB2Jr5bkQWjiL1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1946702.632726	CouzSZ8FAvEw0Vezk	192.168.1.122	57662	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fsnp7k2Ltagm4jrel,FdTwhj2STTi6yk6Ctc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1946995.429928	CuOg1x3xfFq1U0qFR2	192.168.1.122	57664	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8xH0y2H6Se4DE2Gfh	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1947151.503098	CNTGtr27V3GWUjdvz3	192.168.1.122	57665	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcVQL63mNp9nph5cGj	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1947317.836623	CbAJtajUhC0M2JZ8	192.168.1.122	57666	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4C3VR1E17wibHS0k3,FQFlP72KCrMNgxmt4c	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1947975.512283	C51s6W3imaUpaAbDL7	192.168.1.122	57667	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fo82RhJ1jKiY6GNl9,FvxyRm4jqzW3Pvm4F7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1948295.325063	CwTWnwDEed3qftnxd	192.168.1.122	57669	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FaibSZ3056EXq8lydl	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1948468.438080	C8iegc1VZC45xvhIwh	192.168.1.122	57670	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXtRFv3c9hy3AQT6h1	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1948635.761499	Cluedy3AxsmLFDg4Wh	192.168.1.122	57671	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZAf5r1j8WaMK3nRc5,FJgV6C1l8lSfcdVzx2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1949240.451937	C8q1Lc1UYfgBjb0e8e	192.168.1.122	57672	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fu9ONP3rKm3xJYNXj5,FAjXy74X0P8bHSHFcl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1949539.200247	CGNRvE3QXTRV2C1LZ9	192.168.1.122	57674	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Ffx0sboHfCb1Te5W5	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1949717.242548	C3ez5G2J4K74tF7KRe	192.168.1.122	57675	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNw1oN3ZPxeZWGE7Ef	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1949851.559556	CNvqzb292nhwEjftS7	192.168.1.122	57676	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmReB71A57UMQEvZbk,FsYPWm1jl3nrgszYM8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1950500.222029	CUt4g74OWHL8SwYod1	192.168.1.122	57677	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fmstzo4JZMq68tjUUk,FcSFvg3awKgjXWF9mj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1950797.012280	ClkTTj1RnyVXQKXem1	192.168.1.122	57679	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FM5O7u3Xckw3yiX5Y7	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1950966.087584	C8XdfJKeP9N97LNsc	192.168.1.122	57680	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdOfUb48ED5lDHGOAa	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1951114.406712	C7DT6H25mT9pSLSyT6	192.168.1.122	57681	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FS8g4QRFbjkgTZhEa,F7Yd224IKjWWUGIgLf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1951397.572477	CiM5zz4isN9Kt7iQMd	192.168.1.122	57682	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiRBoI10yEXdLniZM7,F7YorW3OfdQsByLib7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1951707.061649	CmJYDt48hqBXvWVAXh	192.168.1.122	57684	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fi6rZa4OQyZyAOro03	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1951830.129875	CCUxoD1gz3OZY2yyK9	192.168.1.122	57685	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FsOZJT13BqkvBQi8Vh	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1951988.452034	CySrdf1xER0ePFgTTc	192.168.1.122	57686	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fjdtdg1Oo4JIXRAI9d,FtMF8n36UAwkcJM0nd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1952545.132251	Cigbyq1tVUONBGbv4k	192.168.1.122	57687	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKYbyo217onQH0ZTm2,F9PxhP3E93iFOPGUk7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1952822.604308	CsoY4b1Y2u67eT4XO3	192.168.1.122	57689	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXvrbLxfzfOM9siBj	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1952996.677271	CMwVO9GoTVTobkJm8	192.168.1.122	57690	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2SKhG1qhec1NCdhzg	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1953123.994569	CoYebq33VtrMiFaKYa	192.168.1.122	57691	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQHvOh2dfaa3LMF1a9,Fyx8b44hjjbA0QN8m4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1953745.668799	CxWUic3mLB99tKfT0k	192.168.1.122	57692	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fm8lQi3L13lXaVd7Cg,FgezZb15SwyVua7idl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1954014.461440	CZHuTw3YY4OeJu5rga	192.168.1.122	57694	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYuzIm1HnozvuIofFl	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1954142.544150	CMmZJS3zeNiktGLjCc	192.168.1.122	57695	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FnjQC93rwFana7wAa9	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1954268.860893	CWdMznFfRTWmQvXec	192.168.1.122	57696	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnsXRU2OODS68HHEZ9,FbCQcG4i1atha9sUb4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1954861.543123	CKfWyQQ9Jg2nDeDIl	192.168.1.122	57697	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMRQnM2yYxYDQQBytb,FR8pql39kk6clCXJP8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1955187.309243	Cg1cwR3fvhXDRhgqJi	192.168.1.122	57699	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7QeeX1nL5hoPcNX9	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1955312.386456	CeUVaw3f09onp654K3	192.168.1.122	57700	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1Ugnc2JKWJyUS4Spi	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1955469.707385	CUwWNuC80Ww4zpzd2	192.168.1.122	57701	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F97Bl72bGmistSwNy2,FcAPoM1fiJLUnJOR8f	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1956013.389179	CivHatnXCIN3JnyQc	192.168.1.122	57702	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0Rp7S1CNjQtWKaUbg,Fm9rtSesKXFA9wVJ7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1956332.168429	Cn1tqd2uioT3OgqU95	192.168.1.122	57704	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FEln6B1Pra7bwPoYMb	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1956458.264190	ChnQtq2y2ELAl7oXY7	192.168.1.122	57705	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIDtJk2jJCD1RzM0Rh	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1956628.593975	CqAJw51il1OXFdMVwg	192.168.1.122	57706	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOS4PG1dvOU4hlnWzc,FKtNVg4cbOl9q28l1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1957225.261563	CumYrh1VW21KXEOBek	192.168.1.122	57707	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8xDbm4w7Ux0u1mQSb,FoqTwq1SyI3lFS4uki	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1957541.039508	CjXFBgCRimQsyBG57	192.168.1.122	57709	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FjvBQRTItMPhGwya2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1957675.113450	CBjkfx4uqZtowD3msf	192.168.1.122	57710	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FAT0u32LurwZ0adx2c	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1957830.431418	CaLjgj1v8hqiaTyDS4	192.168.1.122	57711	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FI7FedQsGBp2UUjC1,FD0p2Ni4gGgnNBo93	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1958487.112118	CjuJxI1a9Gcbs6x2j3	192.168.1.122	57712	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfJISn3luZtVUqyBR7,Fo9gri18boDzrtklAc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1958782.559705	C5D2TU3xRnLCdLkaTl	192.168.1.122	57714	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnQ8G028kmvvsSnpPj	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1958916.609082	Ce9pIO1YAODK8JGICf	192.168.1.122	57715	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F2yVqlMmxYr7DvP2i	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1959045.929026	CDjxBw4ExIQmU6Ryb4	192.168.1.122	57716	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FF9jEw1YfIHUQOdU78,FN5TGA4PlGaUUDDlzb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1959654.604212	C5mpAV1bpGobxq0Xi6	192.168.1.122	57717	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FohBRw17vr4juSkEsh,Fi0PEX3JPfbIBlWo3b	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1959929.410491	CEmH432QiUsAxfnKyb	192.168.1.122	57719	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F93WGj2GR9wcQcCIA1	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1960073.502233	CnjfTp4O6K7dyL7PFj	192.168.1.122	57720	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FssuPJ1hANpCPq4ho9	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1960209.832409	Cr6K213F3dOBLdVy8j	192.168.1.122	57721	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5B2EH3HtDiNyC12aa,F6dVUm3KL3dkgesJy	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1960759.523333	CSXjpdniE2e2Awxu1	192.168.1.122	57722	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaYrtF2m0oyIwvP96c,FZ9QWs4fzHilRitCS6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1961091.298320	CgrW6v1VWSGx2jaMNk	192.168.1.122	57724	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FV83AB1qazzFLgYISi	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1961265.365515	CGZCucpWITJUL50J8	192.168.1.122	57725	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FB3yzv1hLL2nUCaDra	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1961390.700425	CGMWw92hCBj3wjzG5f	192.168.1.122	57726	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FstS5uhsMAW9fh2e2,FdX4xy3VSypY2Hn3U8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1961717.861005	CMTCWI2Z9lFrhJwTwl	192.168.1.122	57727	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeeYW23FZU7vGnncvi,FR0LAe30GwDZzlqvu3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1962000.632608	Cl3nnb4f9MA2xPWx08	192.168.1.122	57729	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FO4U0v2l0WYJWlvg85	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1962178.709008	C4D77314VfaHCvcBF2	192.168.1.122	57730	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FCkamoAasqXcyltUb	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1962327.036428	CCXAGG1AL3jJOhBBrh	192.168.1.122	57731	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfG9Fc42OzHJjTCxp3,FZOzXJ1qk73j239EMa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1962913.710153	CdP9n43cWRQRPCr2b4	192.168.1.122	57732	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWGahPU3vqfrOEI69,FO0mxs3SZ0JjE4q117	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1963172.490609	CtMjy94kmWmpHfYZVf	192.168.1.122	57734	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FxL6Ub2ik6KSHMepxe	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1963311.559497	CRi3gD1i4Rv2dpENj	192.168.1.122	57735	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqLxWz3xpP0pn5hhLc	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1963482.888241	C5VFUZ1JwQYuzMvav9	192.168.1.122	57736	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFTOhb4xXWcwfCjxl6,FzsGDf3QgtkGuhGSp4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1964129.568530	CyjhThdYtSCMriGU4	192.168.1.122	57737	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fg8Y0f2ijQBsv5r4Ib,FlHmLLxyljudyyzkk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1964739.537771	C1SLXz10c1JMSRq4s2	192.168.1.122	57739	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcaCaLwAbKTfDReCh	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1964911.599611	CcBXY83Sp6u7g9UVgb	192.168.1.122	57740	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FhwbOC3G6TP4eo9gj	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1965057.931805	Cbhhxx1a1rX579GFda	192.168.1.122	57741	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6aFoM1cYSB99Sig7g,FefBqGgpOeoqD4ED3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1965338.105745	CJCigk2wH1CzT7ff61	192.168.1.122	57742	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FySWRENVFlZU1fjTb,FIIdsm2TnefJBxpQI2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1965617.856377	CWvHmZMHZguTUMVm	192.168.1.122	57744	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fn3tm51BrgLiRemcg2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1965751.906333	CBejOs7mYgoWj0aja	192.168.1.122	57745	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fz93ro2P4SnotBR6Wg	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1965898.231162	CMWZ2j2czw8HXdYlXk	192.168.1.122	57746	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnjQLn2NSYXc14Ffgc,FNHiX143ZmHiaRM3Fg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1966500.908038	CCqWmn2iQhwjypGSd9	192.168.1.122	57747	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fckeypa5qlfaVUZf4,FCHSST3Fg8K3kETaJi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1966764.679166	CjAbIs13gkf9fWQ1Zc	192.168.1.122	57749	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnMznr3sa76GJG7Ss1	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1966914.748185	C7iSrn33n11Yw9Gm18	192.168.1.122	57750	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUSmY74mHHUhVueP1b	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1967042.066070	CjEDALNPqJBa9uBtf	192.168.1.122	57751	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuasRj4Oii951HP2p3,F1hInP2CLv4HGIAzBk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1967669.748999	Cv9FTy2i1zmq2oWIAb	192.168.1.122	57752	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxYEsh39uqHMTD653d,FSPWWk1NnHC86Z6jIb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1967975.512646	CTixbM3jxQ696x94bg	192.168.1.122	57754	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fb8SjvKaoIplyr9d6	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1968146.559889	CrMm903hBEZyfkY6o5	192.168.1.122	57755	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOrDyT2iyyPkkq75eb	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1968270.882486	CIuL0R2hQAbm1Wywp6	192.168.1.122	57756	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsJHsv1oH6j3jDV5db,FxSvrB1LO4DgYC8Yui	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1968928.548123	CWaphf4YzYDcC05Afj	192.168.1.122	57757	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fv4klj2aWPCFK8VTJg,FF3Lbz2yqGSNBGtjO8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1969238.026724	Ccg8gm45km5emamcO3	192.168.1.122	57759	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUcCBT3qFWhiDm3Mz6	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1969361.095626	Czodzr320uqegrLAg5	192.168.1.122	57760	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fs20ZkXXPJajhuAg	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1969508.412072	C8h8Lz2qfWXy8afGB5	192.168.1.122	57761	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQz9yL3u1pJ30PgLy3,FQ49kg2Adoal0rtPdk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1970124.096927	CpEsypvqDawR6Z1J	192.168.1.122	57762	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrN0j32W3MJkjBU4E,FnRL2O1qhudHg2XgR6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1970441.886676	CdQChZNJ395uwdmk9	192.168.1.122	57764	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRPkLz4sFxhYXOVyXl	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1970595.971071	CCtEKh3CNMdfOI3wI6	192.168.1.122	57765	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FnbkFo2VSxYplq9uag	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1970761.292975	CAPOHfDtavkrxnQq4	192.168.1.122	57766	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIr28C3hLA48Zxqnfd,Fmm2EsEoyUnDmtjji	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1971390.968526	COQKwC1rjGvqCCqAw3	192.168.1.122	57767	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaPO3l2lTHkRmobd1f,F55zGB1bbrgdeUzuy2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1971672.437235	CBV20F4tcp59xy8fX6	192.168.1.122	57769	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fqvmcq1pl6QpreL2vh	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1971822.504703	CFOmvr1JDEKaqsy8y4	192.168.1.122	57770	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7Z6dc3quJnEBieGe6	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1971979.835033	CzYPiD49vZYBm8Ipw	192.168.1.122	57771	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVWXANSE057pDbeJ9,Fs8b4a9H7nulf5uVd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1972524.508346	CBrtPQ2KhLbZ1lHDy2	192.168.1.122	57772	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHosz41kVRc1CQeJAk,FUTRKp4p4fDXvtet3e	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1972817.995922	CuGOJQ2MZqRCspEyWl	192.168.1.122	57774	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmNbTAZrrsXJYewXg	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1972939.070338	CqcRcSy4Q1cdhwMn6	192.168.1.122	57775	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FyDz2C1hEQtXSBF0P8	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1973059.397514	CXsVFC2BsRDQ4QSNN6	192.168.1.122	57776	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXSXQ51Gkjogxen0a5,Fgs3N23eGaTvDy3Yr7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1973353.560234	CTSDdO33Y6Jb2uybg8	192.168.1.122	57777	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiytEZ3WsujKCzRaie,FZI6NlhMcfUDX8Tr1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1973645.044162	CXAWkE3qaSGfQeJLSa	192.168.1.122	57779	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhOocM2DnAEVtBuPb1	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1973787.129178	CAPfAP2pY6lwLpH5G1	192.168.1.122	57780	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fmy7W4dyLRRZ7B7ij	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1973909.459217	CYfZue8M0mWI66vCb	192.168.1.122	57781	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6BJkZz0y1MfrN8of,FqytBh3uf5q4yL3EL6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1974496.142893	CbNuc3yoig4hJn28j	192.168.1.122	57782	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1NGSJ2ZY1jW7qQLQe,Ff36pPVdgnwIFl8X	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1974816.626739	CKmC7r3H5V8UQmVvUb	192.168.1.122	57784	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FiwEaD3aYnv6NxlEFc	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1974992.703130	CeDMeX1E3eo3DHyao	192.168.1.122	57785	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FvCt6h2bx9ChUEzKa3	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1975124.035481	CmXFxO2wD2ClI6156f	192.168.1.122	57786	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyqGnE179gRjd5mCif,Fn8ETn1CzAIk3wpqm9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1975689.698930	CNAe2U3KizHpClEmel	192.168.1.122	57787	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQonIX2P9MyttTKex9,FUTNCD1lhe0GN4mSg6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1975963.486067	CrKFEm3u4slWFopRBd	192.168.1.122	57789	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fp2W5b4QBbZEOg7Vb2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1976085.543653	CHPD7V3MIuycDS4zbc	192.168.1.122	57790	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FpbZbfq4kFCpizWLi	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1976226.871594	CZN7LQ34IOt6ZnmIXl	192.168.1.122	57791	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtBhxo1W06AsItgjWl,FzAjmE2V8OKRlSdUI	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1976836.537957	C3VcDK2WbfFXAvQJw9	192.168.1.122	57792	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fg0nRN2m0T5kTErkx3,FE22cp3kqb4BVf8x94	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1977106.342318	CnkgI02K7UsHj38IB4	192.168.1.122	57794	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3p4Sc453I6EUwT9ba	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1977227.425751	CLuEJV3gkDymS7NPU3	192.168.1.122	57795	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYNOkG2422mHYMZ0te	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1977404.754979	CtN8Tv2MHC0jqEPlsl	192.168.1.122	57796	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F56hBR20rmNBmqvC96,F58vRX1d7mtXXCnzT5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1977976.440729	Cb8jRB3Vs972JLwSD5	192.168.1.122	57797	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEXYWq2ckg6DwlEuE4,FymxtP3R7DciCDiBsl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1978307.242114	CCehqx1WA1j83OZy62	192.168.1.122	57799	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCGaiEacgxQ9TptT	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1978435.332295	CIirge2R9NKWCp18F8	192.168.1.122	57800	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmPtK83JiJ11KNvXS3	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1978614.654332	CvuDssazB1McvueZg	192.168.1.122	57801	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmslfI3ZCtOjTt0LZf,FmZQdP1DOpf4ryifi3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1979243.328369	CHFB4RkXPJXvvpeg5	192.168.1.122	57802	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F66hd32lvwBG3B13sf,FIFspS2dQqshSiTTT7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1979590.108764	Ctaf8gB6EwxS31rke	192.168.1.122	57804	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0WLI92HYk595r3E39	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1979725.187012	CfLIkT1fjndIIZHYs3	192.168.1.122	57805	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWNGcD3Joke3zjC4M9	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1979899.511597	ChCiy1W5fTs2oZSK1	192.168.1.122	57806	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FekXnu3uMnDU3ZDl4i,FZcyXv43KSJoHWd8zd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1980487.186660	Cr8EDF4MfrPGFs6DYi	192.168.1.122	57807	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyAogg3UMhpkvVXEIh,FYKWVs2K44zj6SHhp3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1980791.989897	C2t2fqaFHdAAGuZKb	192.168.1.122	57809	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLKX3h1auK5tMVujl1	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1980940.083857	CIlPRD2bhZixX1Xg7	192.168.1.122	57810	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FaEvZ4tmWylpuvIq1	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1981082.412760	CJJGqL12AzVAub5fKj	192.168.1.122	57811	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fz2STw38C9mqJKY9f6,FibL8b3MpPgT8HG8Dd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1981329.587888	CivHHh2C74JB9E04c	192.168.1.122	57812	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1QYCj3rfwiSm3ciqk,Fltovu4K5ZZCLMx0ac	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1981629.111104	Czd7YqusVaqmZGYZi	192.168.1.122	57814	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLR5tp3JYkJlbzxeY3	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1981804.266247	CFUUZW1Dh3J4K7Evt9	192.168.1.122	57815	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fz3z6SQzNEiG0efia	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1981953.595244	ChwnfM31no6BfyegSf	192.168.1.122	57816	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzaoMX2qDhBaoXxofh,Fz6K5I3tHSGYuw9Ws8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1982263.771090	COcoHb1N0i1r780uj9	192.168.1.122	57817	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F83WuT2RWM7Q3YVqv,FEjLOq2AD7K8i9IZ99	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1982550.537770	C8yt3X3RYuEItJAE3b	192.168.1.122	57819	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FfEsio23XyDho5pwN2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1982717.609902	CpPvOc1v5C7CfbVJr9	192.168.1.122	57820	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLUWAw2mtFxQ47fsGj	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1982878.935361	CSSQDZ3ILItMMjl6Ia	192.168.1.122	57821	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FS7hZw1jWFy0Sp30Ab,Fx9usoXLW7xLrYSUc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1983497.624977	Clic6v17bPt3gBkDae	192.168.1.122	57822	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxdgmH27kHzTKMwRDb,FvOPEw11Bz1wUMav4l	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1983775.389740	CmETW41ga6RKxQOK7b	192.168.1.122	57824	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FtRNZ52TFfGOVYCBPj	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1983932.475706	CKZZk53o0LSq9NZtpe	192.168.1.122	57825	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxnonT32NZXZTbJWve	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1984103.796449	ClhGJW10ykIRtSjbg5	192.168.1.122	57826	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxsOn031N0ZDETsRX5,FURA063IT1WT4qNQu2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1984763.464115	CdnD452x9zy3sqODP2	192.168.1.122	57827	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FImPCn1DKhYrJDiHG8,FOE5M22C2ChhTqmby2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1985062.239139	CSiIIpmhoHu4oTkYl	192.168.1.122	57829	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5bSOv2qozh08Didi	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1985240.306183	CvooHC1lgZlCRZCZk3	192.168.1.122	57830	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8qCUDr44Ja5xbP91	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1985412.628850	COMPAH1eaGhhuHyoRb	192.168.1.122	57831	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSkjpD2CoOjTsbsvm5,FDmMEh2RwCplncZIl6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1985767.789111	CK6kSL25Lgdy7PnH37	192.168.1.122	57832	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F01Lh44wggco1BC0Yh,F4jw3t4BfxUaXHIT35	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1986055.544350	CZcIQd2UwJqlSZES73	192.168.1.122	57834	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8esCghS4hLbQdUzi	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1986192.656450	Cfs0DiyXQK5l9osH2	192.168.1.122	57835	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYIkWh3gGbIxgYvWn1	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1986344.998864	C5iMml0XJA6iac3sc	192.168.1.122	57836	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3Orou4tIcm7tOmXil,FXgZhn1DB6xaoZqTY1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1986972.671934	CzqtFe2g3E1mPBNYu9	192.168.1.122	57837	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYRZcf34ybY47SyYp7,FtiqYU3WRvX9LnQJY	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1987529.702282	C8Honf47TWDnSrqme6	192.168.1.122	57839	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fxu13y2P0JpQ4eCXE4	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1987687.796541	CmHVKf20YoEMUNl3Y9	192.168.1.122	57840	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxlTKy1PtRcEGfIdt3	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1987853.126035	CVzAfg23plzKv4KZP5	192.168.1.122	57841	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fhi2Vr2tXzqqRxYHk3,FmWT2k3x8vnvvl3eRb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1988506.807610	C33uRo4nuxNt37X9Md	192.168.1.122	57842	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fr8sZe32T7VrOq4mFe,Flp8MD2ODqt6uh8Uaj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1988810.316440	CLpn7R3SIZH5v1Fcd3	192.168.1.122	57844	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FEuBN23eBlIfmOQQJl	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1988939.424954	C3dLte2OEz5L0Lwtud	192.168.1.122	57845	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxEGY01Bv60o0lnAye	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1989082.745792	CHGWOz1xsjPvTd1oB6	192.168.1.122	57846	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPHC7WZa2IkxRxKie,FozrfC2sjTU8n84Rcb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1989630.423899	CCNvoQ3F5tKjJtVFTe	192.168.1.122	57847	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fa1WSxeti5ZiqBDJf,FKN7f4145cDUrss5J6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1989932.881195	CHacjy4Q29N1OTQr6i	192.168.1.122	57849	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4Dce9leHqH5XgIE6	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1990104.950370	CrXZZi3OsvVD8rx4Sj	192.168.1.122	57850	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FghSu72wmAlYcHqRza	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1990258.275300	CvrT1XCnM3BVtDdCj	192.168.1.122	57851	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKjyOg21qt4hdCV8g4,F0yumI3SaEKQTL9Jdb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1990885.958192	CJ48R31xeUPZtauXt6	192.168.1.122	57852	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEyvTQSw7HGGiws7,FcXLDO3x4Zu8FeH4v5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1991181.721717	C0mdIi3D61wOQhn5c9	192.168.1.122	57854	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrUiYr2lK3olHdirmh	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1991361.799611	C0xTOB2NrWw9rEslf9	192.168.1.122	57855	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Ferqrb4HcGehI3Dv1a	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1991528.139888	Co9Kmo4DuaO4OGCfZe	192.168.1.122	57856	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdR7673ssqcJFoLFO9,FJLCpv45ZHCCn5f6pj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1992187.819742	CpB20a2wb0P3bo8R42	192.168.1.122	57857	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F76Alm3HR17sZsbMe1,Fm0eTi11n4bD6EQRN7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1992476.276709	C038em3umtJkgoNBu1	192.168.1.122	57859	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKtxobMFjXyjmw9re	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1992651.321960	CyjqL734eII2j6Omhk	192.168.1.122	57860	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGC54e10ffbjSziKga	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1992796.644930	CuDUgH1Ai3VmzW59Sb	192.168.1.122	57861	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaC94c4fzqGMaq4Beg,FJP4jhZkma9xIowsa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1993134.120660	C0wM774aWh11SB9Dx5	192.168.1.122	57862	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjSJ2i40THO8nHMUxl,FZAxwq2LHf2qSoMuUl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1993462.872599	CoOgGU0D8mDtoDEoa	192.168.1.122	57864	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDLMxM1NWcNp8TKPFe	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1993619.924435	CKpOHtBMGHqQStH6i	192.168.1.122	57865	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIMwWW3AtBJzHJTnHj	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1993788.250808	CYhiK946eEWjRvyJuh	192.168.1.122	57866	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6ay1122OcEpUjyyG4,FlkBkf32jDSh7IgF53	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1994060.424006	Cg9yHnnoMtZuymUj8	192.168.1.122	57867	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwXfCgUyKegw42hTa,FSKFNT1D588CcjDMMf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1994351.937732	CP3MZv11gA2z39oEh4	192.168.1.122	57869	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FintFC1FtDsQtCD3ae	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1994531.054599	CKZ10P23uqyKcJq1wc	192.168.1.122	57870	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYF8kd1udgFHFSd8qb	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1994670.379016	CBJpfH9lzLU583C7c	192.168.1.122	57871	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMuety1wYNINnAzVa8,F8YFvi2BPjEVxKhOcj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1995024.852324	CUMVzK2IspVLCt1t4d	192.168.1.122	57872	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FP5TZc13hw1Sn3tAD1,FK9CoEJEJt0DMTxxa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1995328.610149	CcuFEi1awtSSwMmz2b	192.168.1.122	57874	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3T9mz2annUVS8MBx9	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1995455.664756	CKTVSx3mTt4NxaNfPk	192.168.1.122	57875	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FcU2Qg3PKzUhXiIBP3	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1995606.995624	C6sFKb4CSTMuQ8oJp8	192.168.1.122	57876	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FA5RsT96FwMgFkSS2,F81Cvz3JHMHSd3aUmj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1996154.663188	CzUPCN2znG8EMSNEae	192.168.1.122	57877	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGTHrj1ik69yI9rYTd,FQAA1b1c4nXQd1q7l2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1996468.182908	C2IYawYV1Zlty7ei	192.168.1.122	57879	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgBWZS2CfqxsED4INd	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1996615.311118	CV5dqw27zgfJrewhtj	192.168.1.122	57880	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7iPsc4PMcuj9glbzb	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1996768.626220	CpxEQ51pF6eltKP9r4	192.168.1.122	57881	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQ3mrv4Zr5gqYYwj72,F207082bvfkzMnzBH6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1997042.799982	CFaC0O36n5hMdtnD7a	192.168.1.122	57882	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FF6uYh55jDxYYdnb9,FHvaKp4eR4d8A61pUl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1997341.275894	C0IjOK18qmW87HYLb2	192.168.1.122	57884	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FsJLGH1ArkDPe4g0k4	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1997492.332314	Cs8G4y2fLjIxowvao8	192.168.1.122	57885	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F73gjO3fM3HWwfyDl5	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1997622.664207	C6p3ihZ6leouK6N15	192.168.1.122	57886	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fihsu14bM5J1UEQbT1,FWVVTGoaq0DOnDGeg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1998189.328546	Cl4wf53u2urZfDHdG6	192.168.1.122	57887	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fqaopg1PLQmI34ZdCj,FNbJB43ZglR3ZRANe3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1998543.128528	C8u1yk1oEsUIw0O4W8	192.168.1.122	57889	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTrfVdXd6JDHtkKLa	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1998696.232878	ChdRkh3xez6OeEHl6j	192.168.1.122	57890	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Ffv3aR3lQzutDgayY3	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
1998868.555663	CwDmhZ1UYYAvde5J8a	192.168.1.122	57891	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLrvUT2p6Eu6AG0oNl,F1LR3i2BpjdIP60997	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1999510.237757	Ct8tSc4VzacUlcp6Hc	192.168.1.122	57892	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnjdgA4L4b65Qx2e26,Fi9cgH1Tyx6QHI5zH5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
1999833.022888	Ci5e963rrdcUzig9W6	192.168.1.122	57894	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F07CyA2fbmP0xNell7	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
1999978.126162	Cd8Tro4sPp2WX4Xrci	192.168.1.122	57895	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwxTnx3Xc8SNscwZW2	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2000145.441005	CrxR6oaWGbZZFEJK7	192.168.1.122	57896	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVbWvy4ddpJNTfSLh1,FwA0CQ1QQTodGUhhJb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2000470.909341	C87eyW3DB7C3UIHyvk	192.168.1.122	57897	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdLG6DW9vyX3AdSI1,FlvyG42BN6mDcz5OY4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2000747.684696	C3Le3q17iH3Hpnslg7	192.168.1.122	57899	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fb0Bfa3vPDUzq8Epz4	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2000873.744111	ChFkhp1iRvXksMIxuh	192.168.1.122	57900	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FafvxgWv1KF1z5vul	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2001006.078307	CkoHPA3vz28jw3kAbl	192.168.1.122	57901	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsVVmF4rX1S19xsOhb,F6rOVB203vmDa4DVmh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2001660.749932	C7pCbkOl21OHWUk22	192.168.1.122	57902	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIZpxj3kSJdVbUffra,FCI8LM2lQU2TOwrZZh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2001948.536006	CiV56M20glqAxZPTf8	192.168.1.122	57904	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrNCaC1t25xgVBBUui	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2002101.639021	CT1vXTfcVspbJz2j2	192.168.1.122	57905	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNfhJS8M7ahWDTTok	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2002248.965270	CEE9X32cB7ZvurnM5b	192.168.1.122	57906	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBsUW31gortM9fuoTl,FaUprU3fpPBnC7th84	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2002794.639985	CTpkRe4YZ6d9B9Vsme	192.168.1.122	57907	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxYJeT2GwooO8aw5Dj,Fx5blo49dy6I6UK7L9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2003103.110233	Cav3RR30VNCamsa2H9	192.168.1.122	57909	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1Qkmb3rt7MwAkWGu	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2003261.166655	CGEICB64W2oeRIQ55	192.168.1.122	57910	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FC4FGB1fNhOzBooHDk	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2003431.495445	COkJZs4Gmrm782LSrc	192.168.1.122	57911	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ft5fwA2sj1K9bRvKgc,Fcr0lO3cLdjBrI5Kg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2004022.164868	CuOuwt31zNBYLHRas1	192.168.1.122	57912	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F193mD4y3SnaUAWVj3,FHLTUo2U40MWLiWaxg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2004314.957003	CZWgxB2fUOsLV5s7Qk	192.168.1.122	57914	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqoD4H1e8nWzPlbv15	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2004487.048834	CIRcQH2zB9f9BNGCH5	192.168.1.122	57915	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXkrav18MQBiSdrWxc	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2004657.368166	CRqHRw1vdSk341VGZc	192.168.1.122	57916	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaDwtY1FUELjuHBQrc,FfgIis4rKf9zNtvPfk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2005221.049048	CPpLmf17Q8jEdt1K09	192.168.1.122	57917	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F488rZ2x5IlGB4ErNc,F8zXkG4xVpmb3cMBfd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2005536.841526	Ck84JiJ377gGtJNqh	192.168.1.122	57919	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FL82pNhq5I7LI9TSh	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2005682.948167	CHaBngj30mbhfQ0Od	192.168.1.122	57920	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwTZ7e4DykJ4bM16g2	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2005850.274222	Ccjma53V8hRVIf03W1	192.168.1.122	57921	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuTHmZ3P5B1GmEmESk,FWWuCT32emH1GEY349	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2006446.961169	C5c6di3i7fivJUDFr8	192.168.1.122	57922	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuGAj32c3uAJ1pZUg3,FbqPhw3Ag9miaLZKk3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2006704.756325	CUtoxA4q5CqnSEaN45	192.168.1.122	57924	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FyqtvR1VBfSIyDVPWc	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2006869.845163	CnVLhl4kAXDlkGEiQj	192.168.1.122	57925	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FnuS7E36FExOnzlv47	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2006994.199287	CrIv03HRXmAZWC9O5	192.168.1.122	57926	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQB0uQ2vmvPr69YSCb,FfxkYMbsslSzlR8n9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2007559.871954	CEgBXC1ne5Frm7YyFl	192.168.1.122	57927	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ffih792DGZd01PVbAh,FCZjhU1XmYhOa3Z4s9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2007878.339325	C6b4Xu4rzqzieh55h	192.168.1.122	57929	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdDv5011sKlBj9Acsi	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2008050.392879	CBvhvhXOfThLHDP91	192.168.1.122	57930	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWcNJ49rXgUfbLqx8	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2008191.720886	CodfB53EzP0IvRA6Q4	192.168.1.122	57931	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqnaEb4iHFbUbQNtk2,F3IQWQPNhpk6HNUQh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2008759.386086	CCpAU93LhETfiDmnE5	192.168.1.122	57932	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5gNDe1IYtkfgDGZw,F7y0Sd3o19OZrn01e2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2009032.149792	CLjVcy4hIDjDlInc66	192.168.1.122	57934	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZ4Dvn8JgLQduH4we	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2009160.238293	ClM89c11l6zP0otMa3	192.168.1.122	57935	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FH3zo8jAWnAT3Ls74	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2009311.570100	CRwg883Mmxb2YrFfa4	192.168.1.122	57936	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhA2ud2neOylWXsdF6,Fotb9F3YVjwOwSMAjc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2009907.236692	CctQ0h2IQAuyIh5os7	192.168.1.122	57937	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEAv2x1K5k9sroxA35,FayFF31zbh0zAKlL1c	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2010261.044990	Cdphne1zgUoK6u85Yf	192.168.1.122	57939	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnbCgyfgEoNWqGRyh	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2010404.166378	CwcwzJ11ZmOvfQveya	192.168.1.122	57940	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBQozq3BlsiORNkY7c	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2010576.499573	CU39Ew2rTOsafJxUJ3	192.168.1.122	57941	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBVLPC2YGDtO5L1Ylc,FJenjK1WbVR82n3Nj8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2011163.172518	CUQPnb4cG2QFE30oLl	192.168.1.122	57942	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FydVdk2j9fsPhDwa69,FJBdk6qD9GFSra2Bg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2011463.644650	CWk5u4yeRdsdrvo84	192.168.1.122	57944	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWaeDzPqUcZcRrKS4	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2011620.715482	CebHXk2t10PINkTGE5	192.168.1.122	57945	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FVFhneVcT916yon2e	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2011774.040306	Ck93zRnVjwxniiYal	192.168.1.122	57946	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2mAP43qKykTArWXxl,F9F8CS2aKlaH4jlEr4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2012364.729571	C0KhrG6jxKw3Txkjd	192.168.1.122	57947	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwmszE3duHPv2dYGT1,FPJRJz4XvqznnjIUBc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2012705.533778	CjfbXe48MG0Yg2b475	192.168.1.122	57949	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZDuKT3EKjozEZb493	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2012839.636119	C16rTb3o5W3nlFfmAc	192.168.1.122	57950	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9LNsx2M1CldGL7113	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2012992.962239	CrnBvyCa4gVTy0utc	192.168.1.122	57951	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlE1Oo4dK9T8OGNFhl,FXCcDMhjuNAR6Vtj4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2013647.632117	CxM4qR1juSYmtxE8m6	192.168.1.122	57952	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJf6Cm2okBdJsp1rIh,F0Pbh7Q3pJ6rihLeh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2014240.618468	CfsdETWNKLgJPobV3	192.168.1.122	57954	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FQFN6zRpjKhjma3gi	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2014388.697058	CTmfLa1zHcmNDgjys3	192.168.1.122	57955	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgiG3X8n69YHwAIm3	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2014525.024395	CtrDLCj79eYw0A8y	192.168.1.122	57956	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F03xG43KJxpUy8p29,Fi3z3U1Jj7Xudsrvwi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2015092.692203	CmarXA166p0A5CEh48	192.168.1.122	57957	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNpdBG4B0HkuoEYsV1,FTt49A4vEYyBlSc5vl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2015676.682500	CuDRPz4Kjg4imo1PV	192.168.1.122	57959	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FiwcNK1KscwphTqRE3	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2015806.805664	CPdVoN2RCo6os0hu9a	192.168.1.122	57960	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fyad241j5LRbLaqGUi	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2015949.131821	CEb7Hm19yLZPYU2j83	192.168.1.122	57961	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fg6BGi13kYz1Odxwb1,FrErKe1ENO3iB27m8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2016492.804719	CHFfpt2AchV0TFtgM7	192.168.1.122	57962	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fx9Cox4cVoLTdGFbge,FAU8tNVNRvcpd2fbf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2016765.602218	Ch4nCE3OCp2wLCPnQ9	192.168.1.122	57964	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FngEIdFtpzgXUd76	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2016888.669947	CakLWi4oQ2OD5RtwJ5	192.168.1.122	57965	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FTM3tWVNWB7oZjMvc	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2017022.997576	CDVnhj33tFBPPCRT78	192.168.1.122	57966	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F69BntxoM1mIeWZxa,FvBR7D4mMiSTLhTvI4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2017667.674448	C5R5kd2YktHUkkFl91	192.168.1.122	57967	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fak1oQ1aN2CCzwkNjb,Fd6UrP3fya00ECCFgc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2017959.140546	CZbeYC4wNuezFROvsl	192.168.1.122	57969	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCYZ5p4WSTzaOfDqKh	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2018116.215006	Cq8XcB4zYltGnm4AJf	192.168.1.122	57970	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxSLFU1xp7fL3r9Do8	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2018242.541073	CAMY022zmrOestCGeg	192.168.1.122	57971	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5gd9x2pQ9XgpQfVW1,Fqcx044O8154EHoRV2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2018893.216916	CVt1DQDJKXV277jhl	192.168.1.122	57972	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeqYJc2G5wwwnEtNnl,FOy0Rf1Z0nho7PsWZd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2019220.980183	CExVmxutaxB1yuvk6	192.168.1.122	57974	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fmcb6l1QDvKZZF0Sj	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2019348.046132	CQILEX3XpJ2CEklCb3	192.168.1.122	57975	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FyMYVM3NTa54a5DZij	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2019485.367335	C1oXM240NqUYBcAaZ3	192.168.1.122	57976	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwPVdD4TR4bgvLX20h,FL7Gwb1jifFSRoXKn2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2020139.044117	CwgQOf4WtNByQsESjc	192.168.1.122	57977	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FG9x8X2IRV3nYiwwed,F78Ob02SdtYh0x6xX8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2020470.827843	CZD4j32tDXAhIbUpXf	192.168.1.122	57979	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1Crsa1WLChu93msf2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2020643.908650	CmvFM3MzUOFL3Hnxh	192.168.1.122	57980	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FFMC1j3MifhnsFW9V2	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2020772.227848	Cad03nfTC3LqfWhqk	192.168.1.122	57981	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWFH0T2l2dGlyDoYi,F7WAHR2T3QQMpqKyn9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2021324.902673	C00glw3P1RXXbApsL3	192.168.1.122	57982	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkIgOu1jlQVbBSmbR9,FJ9Ttv3iPShDcU0Kh6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2021617.666630	CiTym14Fik7dAc66dk	192.168.1.122	57984	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1uwOy2B3aiV3HPZvb	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2021742.738903	CHLJTZ3XUlJdrh9DOc	192.168.1.122	57985	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7q1bEvh8kIhr05wk	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2021906.067908	Cq6oaa3AZKYUWJG3re	192.168.1.122	57986	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9eHgC2sS1PiYDoxg1,Fe1atR3wwMHST2ObQ1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2022562.732599	CtdxwF3zVSK68bBC3d	192.168.1.122	57987	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fjbb4s1gbteQ3G18h5,FuIOUo3ZYRs4HRSIC2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2022914.506346	Csgt3u1klCbmyoVw4a	192.168.1.122	57989	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDu7KO2qtR9OXKyQU5	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2023087.592675	CYqb6xcdi6fwlH4xd	192.168.1.122	57990	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FrWhtV3BASLnZOqWF6	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2023215.911831	CCVwZwPQHu3nAQ7Qh	192.168.1.122	57991	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVrG8V1yELITTrCQjc,FJl0470zeR24GAsD	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2023775.576014	CHu1mI1gwU1bllba62	192.168.1.122	57992	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPfvAP37Wc5zy7fM52,F2kag71f1uGHXQwS8j	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2024079.055427	C4dXzpf0DRPllcRp6	192.168.1.122	57994	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLwQNl4AekyX0TJRzc	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2024251.105960	CNrzvggq8ubuoHPp3	192.168.1.122	57995	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxtWeI2ujRnLnCCAOc	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2024386.426854	CP8fYW1qnIkH32cyne	192.168.1.122	57996	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2fk3412R0RyuZyV6h,F3DQN31QROGgfEtPX7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2024949.103427	CRbeW33HAldWFQeFD6	192.168.1.122	57997	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1OTTyNsdi2vYDT06,FnjngMMTr4o6rPIFe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2025242.612366	COMrEU3jw041yVTqhe	192.168.1.122	57999	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpHEIB4LRZy6RsHNV9	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2025366.709050	CMvrYeK5RP36ZrS08	192.168.1.122	58000	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fwy8MT3ATkdd7Ipok1	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2025518.030983	CniXfO2a5L29ejp0ej	192.168.1.122	58001	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FG6TtD4qHRdsY3LCd,FcG0nG395m3kjyafFh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2026158.702199	CIoJLd4SjeoJhJCYak	192.168.1.122	58002	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZzWSl4fNe37DilObl,FwM9Hq5JXV73AY0Td	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2026422.478316	C4Wn2m1sSsKsBC0TSj	192.168.1.122	58004	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLvHgG1uwhvSTGmJfb	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2026568.537194	C3vmR63wmfHeVh4dd5	192.168.1.122	58005	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0UjB62vsyZ7QorSFj	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2026739.858672	C9UqY72t2QjGti8gG7	192.168.1.122	58006	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuRZsP2I9sqJUhILe8,FibLo613x40QwdUNF1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2027334.532656	CmD5e33zcFa2wdBnvj	192.168.1.122	58007	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAk7rE4Gfup3IP87w1,F11IfN3JNVayW5f2D6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2027678.325085	CX1f4d1yGaJ7tiGJhf	192.168.1.122	58009	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNz85v29zDONMxBRN9	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2027815.408118	C8EYfb2BDjuUdAA2eg	192.168.1.122	58010	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSQbAk84gOYV0selk	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2027993.730964	C4r3LC2r3chLn3GKKd	192.168.1.122	58011	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrQEb13OAZTWkJ0Tdd,FK18bo1Fq8dW6VByrl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2028611.418777	Cn3Q4D3DcjYJ3eC2h	192.168.1.122	58012	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fo06El2jB0leViHY3a,FluL1xG9KRmvNwVv7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2028879.899764	CLlDQlutWFbAXleOe	192.168.1.122	58014	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMIg4I3jdxDAY42Noe	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2029009.997819	Cc9Nf81pxSKQImMmu5	192.168.1.122	58015	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgWnfE2iQacST2o16h	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2029158.325324	CmtiwP3MVh3yQ65LRd	192.168.1.122	58016	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEziqg1VTxPdSEK4Pf,F4dZF44874mQdhr45c	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2029508.789032	CLydHa1fFsAXXvsrba	192.168.1.122	58017	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAmpK01Jb3rrcPU4z,FKbU7132RiR9KWJdCh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2029837.577876	CAAqrZ3PMhF6VoFtc	192.168.1.122	58019	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5PSOc4gZd4zsyC3Ck	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2029999.650222	CH525Y1TfmjKC0U1bf	192.168.1.122	58020	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fi4PRx3X8ItYulpTw3	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2030172.983820	CfCfT9pklsSNBdzQb	192.168.1.122	58021	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFNeDi2l0bzfcP4B5c,FJNjFK1khKK8DnqQbl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2030801.648238	CLvpjV1JWj8PpsBO9d	192.168.1.122	58022	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0Mn5J1b9xxjt0HPa7,FNHMDlDfiIB2KyGDg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2031108.129410	C06JMJ2zyoSwbTXnu3	192.168.1.122	58024	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUgRt82HKuGk7riIp2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2031274.233249	Can01u4TS0wTR5dnC	192.168.1.122	58025	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fyp8jE3wPufFqtvpgd	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2031439.565070	Cgr9kB2YBFUKBmNybc	192.168.1.122	58026	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeV3kV3Gnqyv1YpC2c,FqFljcuA2eplTe793	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2032046.228462	CC1LvOxJJ0G1IxFug	192.168.1.122	58027	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FS8nm91QdyVBPKeTN4,F1EE3m2AT3sa89zG5g	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2032676.221962	CM12GA1dqrlqcCe0sd	192.168.1.122	58029	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1hUCv1uVzFNWtqO55	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2032800.328788	Cr1soL0SXPqAwWgFa	192.168.1.122	58030	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FR8cqw3eNuLnvNZo2f	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2032927.653178	CzgH3m1x4DrPkIFUN3	192.168.1.122	58031	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyL9W31oOJkuSHSgN2,FcRZrk4q6wcWK3MA7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2033485.327075	C1qwuJ3Gl2sI5j3Dcl	192.168.1.122	58032	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyS13lFTWgEPUFPKh,FMjFFs1iEkGlnvlLK8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2033754.834358	CzQMt03g1EUfH9SZ3b	192.168.1.122	58034	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8fsdJ2ETmyYC1SC1l	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2033916.922847	C8UC5J2CHDlwkTg2R6	192.168.1.122	58035	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwhCDnqRZaAekXhH8	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2034072.240331	CY3M562CQYiWjKV7ej	192.168.1.122	58036	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fqukqp3cf8Wxem2Nq6,FvqB9f1YFfvqs0ICll	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2034428.402211	CwJMPo3bYMCIB0FIM8	192.168.1.122	58037	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbsXPc1NjZSxS2MnSl,FHXvBt1ydIgbmO5oDi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2034997.387610	CH7Zp34TxAWbaHiXc9	192.168.1.122	58039	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6Tnf04d6mBxmh9Wlf	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2035134.474273	CK1lsz3QXcsMdOGDLe	192.168.1.122	58040	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FId40XezCBA1eeEQe	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2035312.802615	Cdhl562b0ogMxePLTb	192.168.1.122	58041	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeZTti2qBoIQll2lH8,Fu3m8x26mVg3Plb7v9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2035607.978423	Cj7JtF2upGKiC4RrFa	192.168.1.122	58042	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOsoRl4kdju3xiSYEb,FSgn7z3lqaplY4h7r4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2035907.745630	CG4PsDcrCckNXCBch	192.168.1.122	58044	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fif49S3CYXLqJ1enI5	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2036061.796282	CCpysJ3B2NTEJ3t8I7	192.168.1.122	58045	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FbliHgoBSE7WKiJIh	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2036200.119972	C7aeTV3CfZ2n9rM3yg	192.168.1.122	58046	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8DMvb2EctFjPeMEjf,FEYCmy1eBMf40KFHE9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2036789.817660	CMfmnm3PQ1tNFE2c59	192.168.1.122	58047	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMChLd1tKLUPJuu80c,FjA2nt3HfxSb4OA4fl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2037122.608053	CL8cQEDNWJCfsr5i9	192.168.1.122	58049	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBiDWR2lQGfyEC2Mr4	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2037269.703520	CLWB002Qvxqaf7cq3b	192.168.1.122	58050	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8ljQo3SW0ntOWHkQi	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2037443.026613	CL0wNt3pT3pusOfcYh	192.168.1.122	58051	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fc6sZ23dBNHdqLP3tf,FsGbVY3RCqZR9MZ4de	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2038069.707634	Cvond72vAjqxK1XaBe	192.168.1.122	58052	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRvh8W1cPt6d7pd35i,FBeuM21AWc3a4qj0L7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2038369.196124	CeN2Sip5sSH6Legd3	192.168.1.122	58054	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fk1SQq3ewPSkLT9Gsl	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2038496.276496	CAPd3i2mAeJdGX3A0g	192.168.1.122	58055	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fm5BRp3Ac52a4WCV31	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2038662.608858	CIGFZN1rytYdDigYFh	192.168.1.122	58056	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8HqUFjflvnFQW2w5,FUcq8z1eHlAbaVjnWb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2039278.295472	C0kSmm2GzXgAT72Kn5	192.168.1.122	58057	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcrNCm45as0l0w6kFh,FV72mDSjw1tr3PLv6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2039596.105097	CS1A801uZd0GvgAlH3	192.168.1.122	58059	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBmb7s219hLN7m2Yfi	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2039726.193044	CD86xr3h27tS2XE7r3	192.168.1.122	58060	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMlWPl2pCnTcOatCZ	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2039861.534246	CyZ4FG4kHiReBI3LZ3	192.168.1.122	58061	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8xkj738MvYi9FRJO2,FdN4yt3O8ubyzRZ3h7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2040136.739664	Co2sJi3g6GCS4iE4hg	192.168.1.122	58062	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxLb8G2HgLytnRsoga,Ff0cau2hbJZH0W3p87	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2040480.229834	CF6UEU11qQYfTmPfSc	192.168.1.122	58064	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fexvwn1LommoDX8lE3	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2040626.360228	CgAfQ53ZxIQqAb4bg1	192.168.1.122	58065	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHAqej3S2LAVKqQ56k	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2040754.688277	CYuFAZ1UQDyEUCuePb	192.168.1.122	58066	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRIFlr40LpVEG9vQo6,FK5Sxm4iqwcDPTwHD1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2041299.362642	C8fRt7UeBlTjoXl9f	192.168.1.122	58067	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fd2onP1LrazS8pXQzg,F0XHC72sfvvxy1po4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2041610.853519	CagAuY1LmpqiCeLZDj	192.168.1.122	58069	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FC9UpU22KHlp4SLWSg	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2041756.954920	CSJOKabXpDQ1cwBb4	192.168.1.122	58070	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FL2Y8V2JLlMXlCw0t2	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2041908.286567	Ce3Ctn3U5fxWGWHMyg	192.168.1.122	58071	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FY2Y9r4bxB1973eC8,FPIvzm0VFMR5VsED6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2042498.975953	Cx8jWs3g0pC6seguni	192.168.1.122	58072	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fmybpp32cwe4m2Ijr,FZf2K74zZbiZny7O29	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2042780.498909	CiLkPM3NUPPHsJ72sh	192.168.1.122	58074	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXo8JK3f182VKXTDl	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2042937.612673	Co2Mkj21oJFGNiRy81	192.168.1.122	58075	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDEYPy4INtMZo8KClb	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2043084.938424	CjJRof2H7Y9BhAeen7	192.168.1.122	58076	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTPb764OS7pi8gZcC8,F3yJXs37sxTSfenfK4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2043673.605272	Cfl4I51VAidY5cfGd	192.168.1.122	58077	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FteckA4fVk9uYoNaNh,FfxhxI2btkOZNlTWZ9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2044261.612772	ClYRDR1eux8Tf5iQAe	192.168.1.122	58079	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhQia83wXhQbhuSMo7	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2044410.711346	C7uddj1DzLcaAnj4sc	192.168.1.122	58080	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FflWNm1ZYHVuMrA3jd	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2044565.035586	CmRPhV3r3hVkb7zrVl	192.168.1.122	58081	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcbR2s3H2alTAC3B8i,FYsbpL6jQMW0WxWbi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2045222.712509	CtpgOs4OnewbXFePja	192.168.1.122	58082	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FR5FqbcrXMseLOGR1,FbI6193iCfBqG29xfj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2045531.199748	CGoMkh5Dq2ifqiUcc	192.168.1.122	58084	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FvMy8S2u3odsAH0PK6	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2045696.248870	Cf5i5O1z9F6pOvpXjg	192.168.1.122	58085	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSz7y84TGHg8ChQBZ4	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2045864.575514	ClbpkzzXPKVgzUUw1	192.168.1.122	58086	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYG38a1GYQr9JzvX3e,FWPmlK1oCvLbyavprh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2046431.249767	CHpXnIOb6M0RK21w6	192.168.1.122	58087	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwRpRl3uyg9ao5H94f,F4nhJD1XfJ7v7enw3k	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2046705.014377	CF6Ye32xxDYA66DAGf	192.168.1.122	58089	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1qUdS1EbouHa3T2Xi	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2046857.097631	Cu1kOk4FxfvRHrfKpl	192.168.1.122	58090	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSt6vj4XgHOde5XoGl	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2046989.423170	CctiL6313tFLeVbaed	192.168.1.122	58091	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmeB8e3kAbAbKs0SV6,FMTDDy35m0gCWKCtok	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2047552.101358	CqTTCb1JfXak2MnHVh	192.168.1.122	58092	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGRjb02pDlPmBYpsXd,F0sXTR18CkUHKWwtJk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2047852.854901	CvBAeKFPm0aw2bXh	192.168.1.122	58094	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fouzn61tYBESoaEAoh	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2048010.907120	CCQhhFnpR1ptuHpO6	192.168.1.122	58095	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWAh494EzX8WUFIa0f	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2048165.232772	CbG78z2E0I8J6ANynj	192.168.1.122	58096	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUVPwf2tXMI1e17tz1,Fy1RGs2dpefFfPVUL1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2048731.907483	Cp8GQq2q2PPN5671Wi	192.168.1.122	58097	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQ9gwRUmaHIWLeOi5,FomBte3XjUzSd1C61a	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2049018.383282	C6gcFx4XkOagzzGjxj	192.168.1.122	58099	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FN1k9GFm2aA4HgNz5	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2049167.429352	C9UJz53ehQTSBiLo1j	192.168.1.122	58100	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLX2Ye3zP4l1hJRsPh	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2049292.764351	CZ43Ry3yJCWam103wh	192.168.1.122	58101	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5hIgP14CsLofEwuXg,FhR7R7Rzin6AaCKBf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2049834.442919	CBH3KS3OXA4bTQlxFh	192.168.1.122	58102	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeUT631VcoNsJeHc98,FLOhR92DHavDygGX4g	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2050487.473017	CO7oei3e8eoQ9DtAp	192.168.1.122	58104	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fqv6b2kQEQ3t6SD0j	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2050650.553562	CTDI0j25jKQUyt1SF2	192.168.1.122	58105	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfOiar2B3Nt2nOobPh	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2050825.867543	C9CpI32PEdVdNsix36	192.168.1.122	58106	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBqU8u1qpvg05e7wfg,FrUNmZ4p74pI4Y6d4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2051386.535293	CrMyfo1gPazT8EQd8k	192.168.1.122	58107	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnXu2j2PYNKnUqbaD9,FZ3igr44FmrnXtSghg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2051638.318587	CkHkqn1MUuZW06yaxj	192.168.1.122	58109	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fu9gQXSyn5bl9W7v5	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2051793.415213	C6xRZd34le8qswlQfl	192.168.1.122	58110	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F794N7434TIx3ZeGs5	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2051939.749527	C0yRoo2SX0Na98wLw1	192.168.1.122	58111	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvE9TZ3eWIw4JzNH9h,FsoQxT3xp1M1NqvEHf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2052483.421329	Cvpz0f3I0f7FqSZdT7	192.168.1.122	58112	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPiJi32IMYHtI23Tb2,FzyIzv2hBfXvaTxEn	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2052760.905154	C0L75E27Up9FkcCRG1	192.168.1.122	58114	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FueQx615rdKHiIgemj	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2052904.003326	CWuKiG2ZnvDBxM3P78	192.168.1.122	58115	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0K43U6NoPBAd5ida	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2053027.333647	CDMhEV3BRJbP5AIbu6	192.168.1.122	58116	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDAvNG2tMf49cMpfSc,FJEbCAs392qZnGhcj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2053647.004599	CD0VBSVeYxPfuzwS6	192.168.1.122	58117	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6qjo82pPQsZgFshXd,FLBaXq343XRXG2CDq9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2053961.500506	CoxLgf3oeuo9COhbMj	192.168.1.122	58119	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FtdYsk4VWcAZkVMn24	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2054108.603918	CNfLND37Zra0LXXrP9	192.168.1.122	58120	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDEpMB3LGgt7xkK8	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2054229.924316	C2mER72e9w0VnTp3ij	192.168.1.122	58121	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHbjkX3I6uzMQaGeF3,FX4XMs1PqKr2rR7qpc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2054845.597571	C0g6184thblnlgHw6g	192.168.1.122	58122	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzRalqTCMJYmitABi,F5y07G4cHRzoOZ4y8j	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2055126.363008	C7p5jRspGBVD8UYY3	192.168.1.122	58124	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcWj944THV0gfJuj19	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2055300.427204	Cs4cPQ2xV5OE01lbP	192.168.1.122	58125	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxECSY22P2QNWgFBB6	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2055456.756275	CX79s92sK0sJ2FPHR4	192.168.1.122	58126	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNDbA74CPTdqe1tddg,FLKFZ5YoEQSHiOH5g	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2056031.424170	CZkbev4QZ8seb6r8Q1	192.168.1.122	58127	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMJbu34JGFaplam5pa,FalQNS5uFRvRYhOM3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2056325.907229	CrYGCd6p9cECIftr4	192.168.1.122	58129	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYwHck2I6HHd2mHfYd	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2056448.026647	CkxYih42kkuycYHv64	192.168.1.122	58130	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxMYsvLg5vpCIiNd1	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2056590.346213	CQa4MI0PlI6TAFAqj	192.168.1.122	58131	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRKciX245xS11pHDn1,FY53kFReToU0bIXrh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2056899.801250	CLMTLz3hQS4TZ8UIL3	192.168.1.122	58132	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fzk9MO2h1xbPPcDS5k,FW1nDW2JvC5WVfGz9g	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2057197.587188	Co6qx12YHiuvPMGJV9	192.168.1.122	58134	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F9tujs9LCoUns9Sf8	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2057366.657903	CyX9Kd2GXJE5Fjo2C4	192.168.1.122	58135	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIrQcV3UnumJqW0NC3	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2057544.988667	Cd4Zpe3jJIkmHiOWFl	192.168.1.122	58136	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqaaJsFPdzRm9Z3D6,FVJPZo39vrUWudX3Mj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2057864.458015	CTVlpb4e6oMU1aA0Wk	192.168.1.122	58137	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvnNje39yqWima3vw4,FpZtl04iqqe5f5QBq4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2058163.230054	C5wANfUyfjVg7P5p8	192.168.1.122	58139	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdxyaLcsaDYMyHqTe	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2058320.279519	CIV5Hl3TGiN0k7zZSk	192.168.1.122	58140	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNLyw21ENpiiCXGAD7	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2058452.604726	CjwMcQ1lohwp3e6nbl	192.168.1.122	58141	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3HdNe44z9BjhtVaF3,FtHCr13DMBQSLPXG1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2058732.776581	Cfv9Jc4ogoa7QQGjug	192.168.1.122	58142	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOCwVd2egHE5kQPjC7,FInHGI1RAL6m0jM43	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2059020.537466	CAz70wijV3YP9Pcm5	192.168.1.122	58144	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0usH02TckLL5dhXAg	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2059188.577678	C0nkaw4O5Z4fhvVrdd	192.168.1.122	58145	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfHHRj1htLs4Hv4Jvj	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2059309.896378	CAeCER2IvjKF01De16	192.168.1.122	58146	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVhw8q3JPwcd1BVbt8,FsI9ViRRvWL1J2017	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2059947.583229	CpFgXZ3xd1kwucmNf9	192.168.1.122	58147	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHwYVc2ce8U46RMpR8,F0LrM73wCzffumnDse	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2060226.350793	CwVBbaMt0VbiWxte7	192.168.1.122	58149	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FV8fhU3pTYEgWeYMad	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2060362.415414	CkwQnq3S6sZ0IQHXVh	192.168.1.122	58150	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fm7FEr3N1z0g6VqJf7	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2060513.747637	CMOeMM8wgTe6o6d5	192.168.1.122	58151	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FalihF1XEBk412lIJc,F3NcG03VchIwa8H9w3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2061056.427445	CDLi9k4oNSzxxnEW7	192.168.1.122	58152	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEmJsMDwQ9tMiPqzl,FqPNZJ17tPA3OG3Xq5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2061370.208284	CYELQ32FTkQgdun1fh	192.168.1.122	58154	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8IqVf1YcdPlwInQ99	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2061503.305463	CqP7P24BKtpsEnF9Db	192.168.1.122	58155	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fuu2rK2l332HfBGrq	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2061658.633680	CTsNTbyLrAMQYfVlf	192.168.1.122	58156	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Frmuaj3dePLnXLV3lf,FSQvMktBWg1VPq0Le	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2062222.313747	C1ExRSih38xNOsdga	192.168.1.122	58157	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIM29T1kkivFr7AJF4,FsiLco4idKywVjxotb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2062526.127726	C8SNHo1x6PsowL0yAj	192.168.1.122	58159	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FSd0C81z9Y3qm1GTLa	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2062671.214639	CUc06QXxsXoqvGwi2	192.168.1.122	58160	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F20yrT3SiPBMBgy7Fe	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2062816.548457	CaAvob2U65EnUOyl7l	192.168.1.122	58161	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7rNRVZsvKIxIRxyb,FJ8jOX1Uej8cmSf4g2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2063099.725153	CWxdq44tFFYxi7Moth	192.168.1.122	58162	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgXpVx1tsgYVvedBWc,F8Zgbp1iIloHJ6I5U2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2063359.503091	CafSsT27j4antw41Oh	192.168.1.122	58164	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1WODj2mfKQIZKErxl	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2063534.576275	CC9wk1iKx4nHOBWwj	192.168.1.122	58165	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMog1Sqs7uv6bzDba	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2063679.909325	CFTYoz1lMN6AYrk6P4	192.168.1.122	58166	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOmxRg4nlLyO96KAOi,FwaZ556VvI1NOvQak	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2064274.586091	CCFTBe1AWawdUwB1sb	192.168.1.122	58167	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbUfj12kbjjPcQqCRi,FQPJUWQWIpBrtN9Ce	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2064610.376240	C9eIYk3bNOCYF97FR2	192.168.1.122	58169	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FH4pnz1So9alnwAsB	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2064735.472397	CF7Ea32fMnO0VgCqml	192.168.1.122	58170	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FTlqH51KjLkYxYMaol	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2064888.788693	CvtJk5yhIZCceI0ql	192.168.1.122	58171	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLJwM71l4Y3nDqH2ec,FshUKb1hBZXYXq8NS7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2065461.500911	CWNz5f4SK76dOcfoMc	192.168.1.122	58172	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNDaBM3UyAI19pF5uh,FPZFF84bYy5kOWfsp5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2065787.268284	CdtgqS2PjseTleY3d7	192.168.1.122	58174	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fsb1bv3TFglLhj6APe	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2065953.343646	C634nd35CgHvsqVua9	192.168.1.122	58175	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKtdvw4f1aDfc5Itcg	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2066083.685561	CqcD6y4aW6qx51WY3f	192.168.1.122	58176	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FApZnr1JzzrZtLz2Kk,FBHFZR1gaMYqGOjREi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2066409.013314	CQErS52h4o7kCIPBT1	192.168.1.122	58177	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbFpkb4VYWhxI745Tc,Fpn72Y2lADwRzSAY09	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2067017.015100	ChwupxRAsrUEr6M1g	192.168.1.122	58179	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FEegYIjtu75WR8wi4	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2067149.084182	Cp0tSBP53Lij2e9A7	192.168.1.122	58180	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FW6X2t2aTsZDbnzhY5	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2067277.410901	CTptz64S1ssBgyvpjg	192.168.1.122	58181	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNJ4kN2LgNM2WGQl14,F2sGmG4UepNnqHIURj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2067818.089269	CPGn334CbVaiWRFGT7	192.168.1.122	58182	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FL6rsF25Qzddr7GnGi,FKiQYIYhJPnrA8ble	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2068414.104365	C7Fujk2HIgU90rpag2	192.168.1.122	58184	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNEVo321oPIVqJY4ph	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2068551.210013	CssP2B8ihAkNqA0vi	192.168.1.122	58185	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZMNko2W3WLrYhoSR6	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2068725.532547	CeMFT33xBmLAMluhSe	192.168.1.122	58186	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIxNPE2kAo22e4Vft8,FrfKdZ2CIcbZVAYoT2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2069330.203728	CvJAr21W8I69lmrMKa	192.168.1.122	58187	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLgZ8GywRNzyKm6qj,FAGKGB3aHldOLuQt3l	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2069677.968701	CwK5Kr3BFYsJE5E0Fe	192.168.1.122	58189	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6SqGH33vPXjKZais6	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2069810.048851	CdODqg3c5S7UKdjeS	192.168.1.122	58190	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLpHnm3sR6iqN0A6s8	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2069939.379232	CLlIG91AJ0kO9ctzEl	192.168.1.122	58191	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fb6k0W2AGzBvrJswPi,Fzm7jA2l4dFEhuRtik	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2070550.057082	CUdqDv3rXodQon3wpg	192.168.1.122	58192	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FqMdrN1iKyyNgcrF5,FXOsPsTjzx2CerSOe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2070864.838130	CSBOX42XfVv79FHWQ5	192.168.1.122	58194	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fni3kb3iIOuQEbNnG3	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2071015.902501	C0gdgD28iqJiNFH6o2	192.168.1.122	58195	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3N2IN3FnNauMWorGi	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2071136.229779	CZskSdGmSiC6JVjVh	192.168.1.122	58196	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FszHgz1A7MKGcBvvl7,FTUWfl3pK2vNhJdoLf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2071769.901310	CsNXZC4jMOOJ25emph	192.168.1.122	58197	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FanpWi1y8Hxluiivf1,FSLvX42eB4WfgKzz95	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2072051.676651	CwiGvjSjpAGsexCYa	192.168.1.122	58199	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fkb85G38pvPCU5HlLh	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2072197.751783	C9r9rw4fgsiuh6nOBa	192.168.1.122	58200	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8RGqi4GVDEjmagei8	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2072350.085184	CzCMQh219bZrObHL4	192.168.1.122	58201	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGkfQ23t13C818Vpk6,FZgeOR38g93D3TiSVi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2072905.764167	Ciyf9oPsAuSPb3Lyb	192.168.1.122	58202	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuLttv4tcrzS5I4Y5b,F2XEJ14BfUhhw6YkM7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2073485.770712	C4C8zz2WDV2qgXukD3	192.168.1.122	58204	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNNOKzCVS4a8li2yc	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2073634.839859	CCCDda280LqDnYEFbj	192.168.1.122	58205	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDBBAs2u8t9pJ1ZXQ7	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2073759.160022	CZWENNBzutuntwcj4	192.168.1.122	58206	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWc1D83EjSHMpjorCi,FHOnDf1FtdMhWZlMvl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2074410.838987	Cv5xaPK2Irwt4IE6i	192.168.1.122	58207	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFzfeQbgdcQ82Jsy1,FYSxs21z9I4oHy1jT5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2074682.604290	CDLuli25piIipNWHCc	192.168.1.122	58209	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fn8q2U2Orx8iWA3efl	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2074852.659402	CzsAOt3wIpaDnSGaLb	192.168.1.122	58210	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FnHHAOZd8ovIKsXFi	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2075018.992536	CQ9Za71YMX49nr9Wd6	192.168.1.122	58211	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FR0lxX1qvGlN0UvHn8,FIOYNK2vAHkv0hsIc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2075652.674160	CfGwxB1Cj2fn6JLbN8	192.168.1.122	58212	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtNA3K3AsORHhfvqGb,FzzRcC4Q6tegE3hE0h	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2075951.461344	C8lPce2cfUmFJ26pPa	192.168.1.122	58214	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcifFePIjbRndxGN4	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2076076.528993	CxGgt7uG4qIZcUmH9	192.168.1.122	58215	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfnOkl4MuS1Ms15pma	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2076215.853256	CfOdMa3NFhkvUGAaS9	192.168.1.122	58216	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLKKvN1s527DwkYEF7,FzzH811Tz8Aljo3PLi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2076820.542702	CPXh7P2NIGrEq7KIC	192.168.1.122	58217	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbMWeK2n2zTh4c9bfe,FtZLg72GjqQCjrkRr9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2077080.326063	C22CLVOulaiRcHYPf	192.168.1.122	58219	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpEYTd3IsKMkGdOKT5	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2077227.413523	CgV2lFnxCRQtP49u2	192.168.1.122	58220	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5GFVS17l14T9OBzgb	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2077367.729466	CI9f1H3vR3KhNBN1Y9	192.168.1.122	58221	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuZV9az8kTyf2yyw8,Fgl2MF2w1WH0PDWTU9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2077967.401789	CKlK1WHdJ0c1dvdqk	192.168.1.122	58222	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fzh8lt24qP0UkcxHp6,FccKKstpfz1HMya43	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2078298.188462	CFaiLJ2nuKslkK5c0b	192.168.1.122	58224	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDyIo618cw6jzXHzOf	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2078421.279894	C6rSf9xQZX5xfzX4d	192.168.1.122	58225	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FECCho1RWnDgpsOic8	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2078587.613759	CHNK2PAiLZzxwbn25	192.168.1.122	58226	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTSFek3UGMvA0gS2i,FKa1kG22Lfe6WRJmk5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2078910.778328	CPlFRQ1shwXn2Zhhrh	192.168.1.122	58227	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FfhI7Z1JOQ8daGXN0a,Fzd4Fs1CgnWNAMvc1g	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2079221.567925	CMvhwxV0c05CjA73k	192.168.1.122	58229	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLRgUP2XhDOrB6sk51	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2079367.661461	CH2Ue8F5TSjyKEJd5	192.168.1.122	58230	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWMceU1znDMnfMFZF8	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2079512.994160	Crldkjge0DlK9H3lj	192.168.1.122	58231	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8TRD44FrBD82GtVtc,FhwcctP5uftm2XKab	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2080122.680685	CfVT5C3l3ztHxGXRXf	192.168.1.122	58232	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyGdS1GfmS3iCtwJj,Fouksh4CKQJ3pzxKQ9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2080404.461748	C3wpoP2Lo1O6sbZok1	192.168.1.122	58234	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5K3hL2pQzxKCr2ug2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2080528.530263	CETpRy3SSonve15Ol	192.168.1.122	58235	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fi6ukM2KXtkGd6Tgp7	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2080678.860150	CaMfHSYG2jBjYmUJ2	192.168.1.122	58236	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fle5bN1b3jOI5o4opd,FhcRpXXmYoHz6snx2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2081322.535410	CNUKby4aFqQuP7RzQ2	192.168.1.122	58237	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNTjin1ewR5u43Qjo7,FIS2deW64EXOnVaW5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2081631.047893	CVGXt14VegcxOiVtN8	192.168.1.122	58239	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKbWxG2R7KaUDvVNx7	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2081786.178801	COMQEN1KhaWUHko7ed	192.168.1.122	58240	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJQbGDBfdEtWQkMY5	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2081912.504339	CC5NlGJ9gVNBC4jPd	192.168.1.122	58241	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9crmk1PB66Jt4nMH2,Fro85w2nLqZv5ySOIl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2082542.170427	CpptVm2BlvrnqMGMUh	192.168.1.122	58242	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F42IYr1hESuIVAIhX,FjoTyD2KR0GXqUSDWj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2082809.705802	Cgf4JF1IjLOe7napG8	192.168.1.122	58244	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWFXhu4n1cDdXt2PP5	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2082954.838189	C1krHv1FtIgYabYjW9	192.168.1.122	58245	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3xgKO32cxhXTRcIOb	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2083126.168762	CSIXaY20LXlmo1MV51	192.168.1.122	58246	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGvdzk1v6IaRRkMOIc,Fw1t5R1XXIjWUTzTt7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2083711.840737	CxGnic4FBf0Fgt76Bg	192.168.1.122	58247	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1kreN3NVMdYZk3w45,FnS6vh21Glo9iqriRf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2084018.613086	CcvWB72V9EazPdDSYe	192.168.1.122	58249	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fj4ya820mZT9jSkDqk	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2084159.680547	CAKzQc2vKNjNwoZY73	192.168.1.122	58250	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fwg85110TiMZHI0ZT9	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2084298.013399	CVVUYA445rWhzyESqf	192.168.1.122	58251	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FGiG4034ztMIZCrXUg,FQPvFj3oeogTA0oaZc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2084869.715914	CFKBx627RI4Ps4IY3	192.168.1.122	58252	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRkCDo12xzadbgSNha,FZ3iTX3i5w4Uq90xX8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2085194.191428	CjdoJ72IQBmw4V1aUa	192.168.1.122	58254	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbFqY72yrJlEnHWHga	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2085337.263367	C2d9yt3xTPxz8tlxK6	192.168.1.122	58255	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F64W0l2pEGm9sSjD7	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2085505.580312	ChvPBT2gfKazGw1P5	192.168.1.122	58256	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrUhUX2SoS2w0velJ9,FH9ujx4EMdWcEZpf2g	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2086099.253177	CrRIPD2441MY2YkLgh	192.168.1.122	58257	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaGDey4FFDKrPtthEh,FYKBIZ2fxYQ26N6PM6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2086412.028024	C0ORwA3cxOZbfcBzff	192.168.1.122	58259	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FGWNeFvkKROLHhZK3	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2086554.112643	C2EeHD2KgfPPMa0oTg	192.168.1.122	58260	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJ3wlu1oOpneO9qNQ2	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2086701.430166	CczVmx3UEho3fNecfi	192.168.1.122	58261	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWyyyy3ZfzUOV5SjVj,F2SRHz2KWFkIL1IzGa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2087293.110175	Cz3jVk2Qz4mhy0KGqb	192.168.1.122	58262	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FO6eXN2pDP6vxZ9pCb,FkHg092G0Uu2Fnqd75	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2087614.884272	C2oOAF4EnBkcPNKV9	192.168.1.122	58264	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnWQro2JQ8gymEGHFg	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2087769.951290	CmQlXu4Y8RkQ09MT1g	192.168.1.122	58265	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FafEUg1NKAsNAW6JJ4	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2087921.272912	CdDwvo28Zm8Pb3HmU3	192.168.1.122	58266	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F09LfN3Rxk1AQrBS0k,FZkysk4RqyUUZarrHf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2088559.941336	CK1EZN2jqLLxCTYoE6	192.168.1.122	58267	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMxWt21wEdKbEShezc,FvgmET3vtMQeeKgo29	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2088870.763593	CUx7fd2NEUtlaGYom	192.168.1.122	58269	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNMz251qToD77S8mk3	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2088991.888510	CkgFYI127bagP1sI68	192.168.1.122	58270	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8ZDhw1QVFIkFl2iQ9	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2089112.205652	CO5Nq11hhVuZ3Xl478	192.168.1.122	58271	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTsPEC2vLuQTNqnIAh,FUpEXq1Wa51fIBJ4ng	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2089744.885013	CTuIPu3IdLgsQ5fJqc	192.168.1.122	58272	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fytr21RImbL7LcPg,F4mdEY3xDwTlO2sPy5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2089999.663706	CFVmfO25BCngyyxQk8	192.168.1.122	58274	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUcfOs3gAasNrLU4L2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2090164.744150	CFsHq73Zr2Oksbl0Xi	192.168.1.122	58275	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdWAaFJ2oEWl5k7Ag	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2090302.066010	CaJrUg1cGkh1RKmKMe	192.168.1.122	58276	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fwg0FU18W3XCBYzug5,FgpnqS1ppal4uT3TKd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2090872.736543	CYDmuw2SBuBUrxoVfl	192.168.1.122	58277	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FD5v5d1j9TcOjtzP08,F3HvFmKaYcide9Rqd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2091488.708847	CaSXYb1Nz1YbFAAOW	192.168.1.122	58279	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FsbaIA3EgyR9luaxpe	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2091616.783365	C9oXQb182I03qwUa0h	192.168.1.122	58280	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNlzMv1yg18DT7vTQ6	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2091767.121380	CT6NeA2LoeEbmMupQg	192.168.1.122	58281	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNE4S92qm61QOZ94Zb,FQzJSh4j5mahxUun4l	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2092109.294344	CrmBMW2sw4fp2KdaDg	192.168.1.122	58282	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2h8Qv4LzbsxaZi26k,FfHd9X3mBenWRU5OR5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2092426.059537	CGqwKn5SPjDJm3VS8	192.168.1.122	58284	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F77avl4dU5p6cQYhZb	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2092599.144830	CPu9Ik3ZN1e3jH4p47	192.168.1.122	58285	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FriVEz1Gb8FHnKXOY1	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2092762.463620	CdzBGBUeykLNxi4kd	192.168.1.122	58286	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fb8WZk2DgIEnxW4o98,F1hy6v4mCB19PjYqPh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2093330.139641	CbdsgY3Oeq8iXSs1zc	192.168.1.122	58287	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtpAIeEKflEWL2zVa,FlaUQF3DkyvTF9QFV9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2093622.940164	ChoYyrRnS5ofs3lc8	192.168.1.122	58289	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRn5Yg2rITWARoABde	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2093795.034038	CXXepY2BWJ0wb1oAh6	192.168.1.122	58290	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FbbnBV5fs6IYeGmOa	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2093956.370139	CZZ2IC4T54iguejwV3	192.168.1.122	58291	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fjj5n92xKKjF6vL6h4,FSL1vf43BqGfP9ffy2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2094585.044143	CLXuBI2MnMRB36dE41	192.168.1.122	58292	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRqY4I23HrGrZWGvfd,F3mMhc32rdZEtbO8Ii	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2094903.570279	Cxx3Ayi4Lz9sQ3NW	192.168.1.122	58294	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnTISJ2ZqKXKjevRIk	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2095067.703539	C6Tizs2zXBSBJFl0eh	192.168.1.122	58295	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKpZz23ieih2MGdbK4	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2095246.024236	CnsDpaDn0q5L0NFC9	192.168.1.122	58296	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbDLDz4pBoD8Vk4iQ2,Fd1XCy26Fgy3B6RXI	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2095800.692033	Cz31Mn1vi7K8SB7mFl	192.168.1.122	58297	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Far0xY1dhutCh8pdTd,FQYZ9h3qgkhtikt1b6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2096066.215108	Cf1g8l2rM213WQqO1	192.168.1.122	58299	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5zTe23eioAeyL6hkb	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2096194.323910	CjsXSa2179G1IctgF4	192.168.1.122	58300	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6gBDO2x6ClsrBGnQ4	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2096349.641203	ChJ4V313HAfnZnIhff	192.168.1.122	58301	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtbfM8fxfKHhfO9uf,FafGIg2LYli4dDo414	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2096627.811250	CgIDKbHdOpcWbxqZe	192.168.1.122	58302	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLYepS2TALamewSF2i,FSs7t54IumIbqN5FYc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2096922.292038	CkMtPp2tEpORZUG6Ve	192.168.1.122	58304	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhMgQ746xUVgSWdvcl	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2097046.358558	CdTLab3wRHirJGbvAh	192.168.1.122	58305	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPYpMA2nEyYpNMUKV	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2097179.675100	COrsTX2xwhbuW0xPQd	192.168.1.122	58306	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxUwkUF5qC1AOqI16,FWydNq2fxcU7NZuuCd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2097822.348708	CQL0d013IMahuJ72E4	192.168.1.122	58307	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FaAM3J1N11hc3KrgLg,FAwXz237o09c0fbwe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2098102.172983	C1PvRL3wJcosmJMijl	192.168.1.122	58309	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FgnUL126KJq4AGSmJ4	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2098255.296579	CKlJKh3O67aWCBnOH	192.168.1.122	58310	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fax6gC13YdeiSxjBSd	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2098434.619270	CDqrBscOudQOQPCn6	192.168.1.122	58311	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3szEo1hasl813DRpf,FY6yLE3Wkc8ADn7qZa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2099079.295948	C3tqeA3LLuswAZkmd9	192.168.1.122	58312	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIn6dO3FF8Rvtza54i,FlHO9aZhFbPEh99z	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2099374.056498	CVMehd1T2Gw9OvyxQh	192.168.1.122	58314	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2y0Ek1o41FJnWEtV9	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2099509.109322	CoY2884D7jKbILqJif	192.168.1.122	58315	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fp35u82BD6Djdo82q	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2099634.434035	Cqet9IEPNXs1tpeB8	192.168.1.122	58316	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKFFNg1EntuQ5EvD68,FPPM1y4MEes7K4oDz7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2100269.096464	CE9qhFMsj9PHD4mNl	192.168.1.122	58317	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBCcCx1EZzCbf18JW5,FW76sa30DI75pEShm6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2100545.887826	CuDlq02VvvX59LXJie	192.168.1.122	58319	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fh6Czz3eDVxk7jmhee	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2100706.981873	CKCq9y1apHzNPbP8A1	192.168.1.122	58320	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FAKAwW1GrXwlwx4oqj	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2100866.315149	CHbrkMp3cnfuFBtO7	192.168.1.122	58321	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVAqfL13iQRxz8gZ0l,FdNl2V2j2TCnwi3Pxa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2101178.774749	Cesp2r1i13ndmCabD3	192.168.1.122	58322	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkZ1Z04plhPSKjPkml,FXwLXC37cGbUSm07y1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2101478.288926	CldXVQ3fiPuozAY1La	192.168.1.122	58324	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIA7je3ku5b2tmbbv7	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2101633.383633	CeWdFt2O7cBu3bvPgj	192.168.1.122	58325	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQX4lfqu8wCOzxUyi	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2101774.701206	CSTFPyAI4An1dzhO4	192.168.1.122	58326	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZrIku4ALlz1sASe25,Fw24ot3seNvESZyew	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2102433.378176	CV4Mez2leZDMqQ5op5	192.168.1.122	58327	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzeCx94gf0uhA1UZG9,Fz2YhG4uUNdY80mz42	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2102752.152136	Cwhihk2aa9wKFoQyqa	192.168.1.122	58329	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYhPp6i4Evy09ejL6	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2102930.207843	CcfC3C1KpPUdmqNq8h	192.168.1.122	58330	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FVCpYQ1RPCTLKAY4l8	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2103057.525499	CzRnx8ZPWcTyRjE89	192.168.1.122	58331	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F26eCl4Q2TaFPlwHol,FPCeHs1LnDR4yywyif	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2103628.196653	CKsFzE2Ltv3ISXHF63	192.168.1.122	58332	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3LMJv2JiJGpSiuJKc,FN8Smu34miuoHmO4Ok	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2103896.965982	CmkmFP3UdDWM0XlpXe	192.168.1.122	58334	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F9hgws3Xtf2e6msML7	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2104073.011744	CeAmjJ3S50PgRxCB13	192.168.1.122	58335	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMb3rn1QR3GujcUbWk	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2104248.337933	CaEGGk2lfkOFbYPyB6	192.168.1.122	58336	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXG5g13bB7igKGi523,FNDKSH2suamntkDyz2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2104836.012722	CG5IeP3d8emp8td6Yh	192.168.1.122	58337	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKvYGE2DMYFWWqhrrj,F36OGN1OKEqRQHS9qb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2105084.763801	C6tBNy4g01qxtcaIBe	192.168.1.122	58339	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F12pm03tEJ7y8hpw7f	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2105210.837751	CSq98l3WH1KVqKHys3	192.168.1.122	58340	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fn6a9x13JV4tWcdMmh	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2105369.219415	CbOUCH3FpR66oEQkMe	192.168.1.122	58341	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVvjWy4mFbzkcxQlM4,FizNAo1MTafLcxdiwd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2105942.884183	CYQyJ03VTaY3twoNIj	192.168.1.122	58342	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzLJfm4JPcIluFzbRf,Ft9LM63xolp1OFEkb8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2106261.373972	C2qXf11QaPZCxAYiKf	192.168.1.122	58344	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FEQw7k390DouaohMZe	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2106419.424903	CXVEA7lmtTFELxwsa	192.168.1.122	58345	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdGVuE2OWeGRMI9Wi8	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2106549.746680	CQ3Mvh4HwefyW7TS7	192.168.1.122	58346	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbVjFE3WBu7CVc9u8l,FxruFD4YX27wVs7Ez3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2107153.414615	CH4UMn31M2LaGfxXY6	192.168.1.122	58347	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8BFgOL4MFxKJ12jk,FWO57bRUNKZ3KryMb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2107796.404942	CkeEWk1Crg7qbxuPXf	192.168.1.122	58349	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMET1A1H3333olyo0l	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2107930.580289	C42FcE4fVZwe0KjUv7	192.168.1.122	58350	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FzpBSg3tQsr1W5DTha	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2108053.918386	CUABql4cbPZmSbgfg8	192.168.1.122	58351	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbWMqw36Bhl41wC4M6,FqnNq32TMbcQcZeiLi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2108308.104860	CnQcci3om8L3LtkcT4	192.168.1.122	58352	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsVrnE3YZZDq0bkZs3,Fqan8l1nFG584Z3Tv4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2108621.917165	CcNxOT2yaKwcdRTI2e	192.168.1.122	58354	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FaKYsM2CGP7PkvuF79	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2108776.032864	CcivrPkYDhVy2Sysc	192.168.1.122	58355	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FV56Lm3Bx7U5GOAxOb	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2108907.376392	CPez3UB9UwaF8Ymv5	192.168.1.122	58356	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fdj24l164GewbVyu64,FursBd4PjHl6n3xZs5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2109565.052442	CJ3hJPDxOF1fI1zse	192.168.1.122	58357	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzusDs3ktJPXIxqUe,F2UAtt3CdaTvjgryd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2109853.553170	CpnNF2qhNAwrNk39a	192.168.1.122	58359	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJTrWE4dKSrLBMxlV	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2110003.858708	CTOQXYA9AnmyGOQ01	192.168.1.122	58360	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FuaLvi4ZGdEUy4ZfHg	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2110125.197155	C8Hhxi21yW1lc87s8	192.168.1.122	58361	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2zF2GFoL404TwYF6,FxhAJt3LZ2A2Hddbg8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2110740.873265	C4jWba3NHPdtBj0ce8	192.168.1.122	58362	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQbiwj4E3UcnRMTPTa,FVNw8z2otlNrxk0JGe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2111348.884705	CueD3Z1iLrZcYVxOb	192.168.1.122	58364	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcJ2oE3HeXMLtvqVCb	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2111498.979358	CpOaWU1FTJa7f6xzO4	192.168.1.122	58365	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgWlE21Te9rV4Qm6ya	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2111675.304793	C99QPe3QAd6B3f1bje	192.168.1.122	58366	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRJg3j1SKH8fCT7Qpg,FpQ7Am4MHxqSIsQ36l	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2112227.980664	CPKsQv1WzV6UQqtTti	192.168.1.122	58367	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyGQzZ1kzFJHXfEuz9,FPfQzo2ci614uNlHcf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2112535.818521	CHPVAv1wxFKxzRnkGg	192.168.1.122	58369	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAZ1SJ2mgFCKx5fLxh	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2112714.045028	CCSMOvexcT4IcrWcd	192.168.1.122	58370	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F6rd4E1f6hr4ekG7R7	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2112886.367501	Cxs6ScS5quQyirANj	192.168.1.122	58371	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQ3SE24iYBGs4ibKo9,FmIV6G1RSNTjVNfZTg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2113242.569616	Chmpe61lwnuMU3Jagg	192.168.1.122	58372	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fkw5dM2dcq0x8p0xac,FLzSuj4UHjiwuPH7ee	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2113530.107485	ClihbW1Y4edtktx075	192.168.1.122	58374	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fj2eGw1DgAe2dkBb9c	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2113666.214044	CTnHwK20oNq7YASf6e	192.168.1.122	58375	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMDgVl1YGW01aJai8l	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2113804.537445	ChMlWG1AJFJASYaLE6	192.168.1.122	58376	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAxKFwV6jDsIYXpD7,FK0N1v1YdHUxDjKJOl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2114398.211321	C75lQm2h2tJsTvOufb	192.168.1.122	58377	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAoksL2JpccNdKJAV7,F4Qb2b2aYuFIxmgQE3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2114707.011398	CK883W2KfzDJTTh1F	192.168.1.122	58379	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdHyix4CB9RdKeqx48	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2114839.110532	C3NGDd4P0MpVzRyrHb	192.168.1.122	58380	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FyY1Ee1ZPKItpqsKyb	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2114987.429296	CX1i0fw9qcz21DDB8	192.168.1.122	58381	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpddjS2i3jYbkoHSZ2,Fk0U2t1tNTAEmP7vA3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2115550.167284	CQOwYk46seq4e9tS6a	192.168.1.122	58382	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFiULd4woAv23WmQqe,FxA2bg2YABZDBzkD49	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2115849.639966	CCLxrf2lcKUGEDYdc2	192.168.1.122	58384	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fm4USyz96vjF5fvQc	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2116001.711906	CO1nlT13qHU8nx1c91	192.168.1.122	58385	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHjxJDwoI5aQcingk	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2116132.033660	Cj1mxo4EAO7wr9GZSd	192.168.1.122	58386	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKYkM613L90gC6gMsd,FGF8Kz3LPNjJgZEpC4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2116758.714910	Ckp1db2MbTrCMYxXRc	192.168.1.122	58387	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUWX6z3N6L5ijuyiG3,F4H9Dt2Q23KhnwCCj4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2117022.517017	CXYhQh3xRCYATNANTd	192.168.1.122	58389	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F9F89E2srgN6hOKPxg	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2117195.628891	Cnb4MZ2d53y5jKlwrg	192.168.1.122	58390	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FAAQaM3uQ1mgGEK5X5	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2117345.949222	CevLhwkPv67fILET3	192.168.1.122	58391	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fa8Slq39czsRT1aoHg,F1H81pjEnCIGRrEOk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2117898.614168	CHeOeT3EAXzgz9P5mb	192.168.1.122	58392	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSJs5GkShKHzi1zX5,FjinWv2MshvW0WzU3g	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2118200.404248	CQR6QOUMqVF4E9gtf	192.168.1.122	58394	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FvbLmB4xWlZokgbRS4	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2118362.466475	C1Wgfy25KUfBF5wSsd	192.168.1.122	58395	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWpYQU1KoqVUdPIwUl	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2118506.798019	CfQCCn3xbt4ipXuIod	192.168.1.122	58396	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxpaOdQY6BCpyMbD1,Fl9mCp335r3wZVkc1f	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2119117.485574	C15NocruUVczkFih9	192.168.1.122	58397	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3ykHj4BJZsCZ9P9Zh,FQ7YbR1r6qzvLGs0ua	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2119413.277747	CN6XhC2i7aCwHpWpKj	192.168.1.122	58399	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHikQ7QhsJj35OOo	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2119554.389894	C5MCIC1yqqrVQoBmTj	192.168.1.122	58400	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FWo2rC3mlzhshcGY2a	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2119675.718688	CJu6df1la6SbaZmC5l	192.168.1.122	58401	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwzuKK3JvQaghO9nLi,FaTmKKZ6ckwJiuH0g	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2120292.385460	Ct3va232PnuB1BqDNk	192.168.1.122	58402	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmmWT5265FamqnSYi8,FXwmlZ3t7JMNxzRM84	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2120585.141338	CXq3B64z8m0ZG8mYAb	192.168.1.122	58404	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F68MYy2mI84h9VO771	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2120714.197694	CM7pib22RA2BOgbCg1	192.168.1.122	58405	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F069ks3xkDLc0WTvHb	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2120869.515175	C877FW189I9HRbbmS	192.168.1.122	58406	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOcCQy3SflsQIynjTd,FLplsCzvBZ1enQSQa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2121411.194191	C0Cyyd4m8uSGI23Goe	192.168.1.122	58407	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiAFaS2SemWr4XaUw3,FzJq6r2u2ScnT5pDrg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2121678.986739	CCvAHD2QskUiXpUHIb	192.168.1.122	58409	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPp6dIBZ0OPIdD5N7	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2121802.061913	CuzKtr1xxFYIcI5Skc	192.168.1.122	58410	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fkybef4JKQI3uuovv5	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2121972.391108	CI9EBx4FQnY9WKklT6	192.168.1.122	58411	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNd7kb2joDpEo8NAX5,FDbKfp27KrPjghbTwl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2122607.064017	CkvjH32ygkDgrlFpK2	192.168.1.122	58412	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeGMH73S5NaQdr2XDl,FYrqed1g29K07qL4L9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2122879.843997	CfGUVG1xnQOSJWq6Y5	192.168.1.122	58414	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FSH8Kj1c4vDQHcTLq1	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2123054.903005	CZAMvg1ExMthsX93C6	192.168.1.122	58415	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHczrRxOQHgM7GCub	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2123203.230571	CjljNM2iGgKfLTV4na	192.168.1.122	58416	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fh3Cvy1VlL0JLBfWF8,FOeU6k1pCHcFvlFzt2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2123743.897986	CvvpLQ1jt9a2dKKNG9	192.168.1.122	58417	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTQsn8USSXLQUA6Si,FkPYQQ5vE3vLPbB3k	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2124044.677727	C8CoNbxqkUMMFAlDg	192.168.1.122	58419	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHZKxE3psblQhzCfj	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2124222.742262	CRZmHt25QihtgyIs14	192.168.1.122	58420	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FH567r356WZhASj4Q1	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2124395.074220	CkMFveWePPieS4S9g	192.168.1.122	58421	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fa4Vhb1pa9xT09q912,FeDosi2EbxcJZ6Uub1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2124951.754640	CxfqAF1cdRj00O3mk9	192.168.1.122	58422	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhXLkz4b2uMzPrb4Qc,F8km202Yt56RKAEwf2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2125254.514887	CKxbBw2qZ1mmmVGLkb	192.168.1.122	58424	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FeG1PW2IjsfedkKXGk	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2125424.570228	CWoXEC30ycIUBVRfnf	192.168.1.122	58425	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHg8bu2UpSkBPQAOob	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2125572.887535	CeODgU3Quobz92UrX6	192.168.1.122	58426	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FP3g8L1xR3UsdbTZUc,FuT1rPC2xHzaUYX61	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2126131.551397	CRzVh7gTmrZnsRVN9	192.168.1.122	58427	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ftmz5X3nk8KmyJ85t3,FPvLdm4cYzR9TTgELe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2126447.324284	C2aJpC1G86IiNKoOL8	192.168.1.122	58429	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FH6zHs1M0v2UM7FSZ2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2126572.440650	CIVZN13kJeueDxccli	192.168.1.122	58430	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fp3tmq3GdcUTdsa3xl	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2126749.761043	CJdxgs484vFtfwnxS3	192.168.1.122	58431	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FejPOb31wcZzdhbar2,Fj2fa34d0Kf41A67Kb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2127358.434916	CCjdp13nFUbnq0ffz4	192.168.1.122	58432	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0KlhF4fDfHRiCYGhb,Fg9a9iIV0zF0fv1fj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2127644.234469	CF5CMH1RfzZB7gNHM4	192.168.1.122	58434	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKHOZe1lWKxzwXDuzj	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2127815.337598	CfUrry27lNQ0Gm5ZLj	192.168.1.122	58435	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHXxunxTOjJXP5Rah	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2127955.663616	C7VvBWyHmkDzxdrr8	192.168.1.122	58436	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIx8nm4H58LudoG6oh,FppQib3fO0d7pOLWj1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2128547.334307	CCNKeY3JgEa3N9luX3	192.168.1.122	58437	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDyt0q1jp6f0GLNrL,F0UYeClESIft4cwe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2128879.131859	Ctyakk2ybHIXn5C1Qc	192.168.1.122	58439	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDUYn21f5eoUot9k3a	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2129040.258651	CwU3F91DPxMW7EqQAk	192.168.1.122	58440	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0WHZtvmTSXHBvCz3	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2129179.593700	Cqd8m41jq7QpVhOrc5	192.168.1.122	58441	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fa3TdS1OwDW6WbOD87,Fu8P374vnHXQGqXZQh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2129826.273059	CExwuW2mcypfZBrZC6	192.168.1.122	58442	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fa7aMo4dlsBQpTupQk,FN0r8j2jNBDvFzTsAl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2130132.055608	CCgoXb481CJXu2OO1	192.168.1.122	58444	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FA8BVBmOWwgjXhwLc	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2130254.164323	CUIr0pKpRzlmHVsXc	192.168.1.122	58445	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FeO6gr3zNBsc5YI662	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2130404.495065	CxMciY3S8lIri2CYg5	192.168.1.122	58446	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7dm2d1ngsHrDWUKkd,FgfW0v372gR0bLnauj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2130952.171972	CEm0Ha2M6PCkfmQ246	192.168.1.122	58447	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4aClj2obdZhdbljEf,FbBnQt2yTWaKvVBnFi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2131282.683225	CulbX44Gqyf6zt9Qo7	192.168.1.122	58449	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7f4g41bVRxMfmxcZd	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2131462.812965	CEAs1k6PHpDlJcaZe	192.168.1.122	58450	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FbNX2g17bElMhDkYUh	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2131633.130249	Cujt532v6CRHBMdAml	192.168.1.122	58451	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fk2pvA2WmAfCj9rs2j,FUY2sm26fgB0mDxDKa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2132239.803597	CYmqIu4sEqk4ZdDJYb	192.168.1.122	58452	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FV2xgH3Sc2rEvXkdC1,FiVtw23KpT7pnvIQG2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2132534.572204	CYC86c4Q3MHbtyijVa	192.168.1.122	58454	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZFmHk3nQtNat9d7N2	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2132680.652716	CH5fdSaFMn7lDEL2i	192.168.1.122	58455	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F5khGm2pSHoTCWrVDk	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2132832.976330	Ck36DYGL9GOyPEBd	192.168.1.122	58456	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0dRy93rmuRP9dT7Fl,FBLjf74MYrElm8uNVc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2133386.652241	CQcHlc30inf7mZDAff	192.168.1.122	58457	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAale02h0aAK3vPuWd,FHj7i02vyg3fDx0vIf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2134010.671586	C1wQVgXRdYSjalwqd	192.168.1.122	58459	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUF4b02P1cn0q6CRb	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2134172.799127	CzcZ0E1amrsZ0E7mI1	192.168.1.122	58460	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqFJVs3mvEczCALzOe	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2134341.123238	CcaE0v1lmWIUMMWYL	192.168.1.122	58461	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQfzw12RYtBFFhTVO3,FE3JSy1IYoNjLM4ob2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2134908.800728	CvDNAu2fNRb504GYS	192.168.1.122	58462	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtL7rP2LsTaL5Clgh1,F25YLPTKdsmA5OkAj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2135250.598361	CNedmF1uqQqZwA7RU3	192.168.1.122	58464	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbULQN24MWYct62W56	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2135378.702303	CrkCtA2vGGvBe6AED9	192.168.1.122	58465	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FTsQUH1kalDZmoCs45	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2135548.029928	CZztSa4QfZJMOPiMte	192.168.1.122	58466	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHmWEhrf3Gu8wT122,Fe6SrI29rmIQUZAXE2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2135826.209630	CSSJCq2FLRiOynaoRi	192.168.1.122	58467	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F55GuJ2lR7Bl1z4Yi3,FC9F1Z2etMzSBW3qOe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2136151.022994	CgZv6g4phE6VDbQeU5	192.168.1.122	58469	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKbh6L2wgxcyYBfXL7	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2136323.109930	CSbGKy2V66asfk4k5d	192.168.1.122	58470	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Ftcfzc4wMQSQaJIojc	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2136487.440335	CaEq9A1FcwX85UceMb	192.168.1.122	58471	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fhkn8I1fnTqyp1Otij,FPM9LE1kG6FNMSF1Ad	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2137095.124013	CbQD5941eIckwjznw9	192.168.1.122	58472	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSwJYFa8yzb5cy1oc,Fg6jtl2PynqTJsVkS4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2137406.625534	C0laA94xGxjqQyYmO4	192.168.1.122	58474	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLy4ajmAqkS80y5tf	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2137534.692637	CFQ8Ci4HwHgldrRtmh	192.168.1.122	58475	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fs2fvG1YI4qGjs2x1d	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2137656.030603	CMGuNG3NBOqBkzTQuj	192.168.1.122	58476	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fr1YYW2YULun23siZ8,F5DSKD2ttuPTugfI4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2137935.201847	Cc4oc62d1EEvjigTEl	192.168.1.122	58477	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5HZpO3uK9QzZu4pk7,FMwuOJ32Qundsl9AF	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2138223.024135	CR3cPI1JwaKDfvYXc3	192.168.1.122	58479	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F9xaOy40NBaJF9ZBf4	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2138385.135555	CqB0Zf2Zk4QzfnApBh	192.168.1.122	58480	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJ6ZINTdP9hrTF8S9	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2138536.466959	CjJFQD4Ny8q215sEv9	192.168.1.122	58481	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAsk3wKKODEpd7P5h,FBzMSpywU9D7O4bOd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2139125.142791	CI1BYw4UTskgs9xZBj	192.168.1.122	58482	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhC3ve2176yqOk5Lo4,F2tPzo28C72HTshYB8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2139429.662158	C213jZhKI4510ui6k	192.168.1.122	58484	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIZZfO2C3nrjYFIQLg	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2139567.756017	CgKSFg4GvoXnw8KxQh	192.168.1.122	58485	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F4NAvK3pruPpBG1cbk	(empty)	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	CN=alschallast.Eandblenprvar.reisen,OU=1Epountheer and Asdtosymin and 9wapangh and futsheundt,O=Erytith Twettath Co.,L=Warsaw,C=PL	-	-	self signed certificate	Malicious	CC
2139738.094308	CRpqrV27r3HBol5Feh	192.168.1.122	58486	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fevw2w2ZHt6EZ7ubl9,FoRCm83eyu8liQpFS1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2140056.271748	CvLJdo1SMswk2OWK7b	192.168.1.122	58487	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHdsj136oaAq88S6h5,Ft0HO643ZV9ir03gJ8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2140364.796824	Cdvk0j27i44XMphG79	192.168.1.122	58489	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FZfpDi4X0kt7ASUGCg	(empty)	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	CN=Lytegepsthans.protection,OU=Ns.otr,O=Germe GMK,L=Moroni,ST=Theft0,C=KM	-	-	self signed certificate	Malicious	CC
2140501.909297	Cfwfz21DJCzQLHZYfg	192.168.1.122	58490	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fh9TKA4sK1O5nSGFdc	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2140637.277435	Czkq9x4j1vOVH7avHa	192.168.1.122	58491	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FT6dP7YnJqfOoe6H6,FyJ11w4UASllqf3Xel	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2140920.644403	CkYgHt34WEakmaIuXk	192.168.1.122	58492	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKcZRS3cEVsCWfjoU4,FF8o91FKEgidoM44i	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2141225.161909	CVdH112nhS5sLu4Uxh	192.168.1.122	58494	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F0PpTS2erZgHruTdP3	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2141367.252822	C9Tm7e1YHGDKVeahI2	192.168.1.122	58495	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZcvis1z8LysfhOFpf	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2141545.582942	CXxZzB1QI55wh9Zsfh	192.168.1.122	58496	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fi9CH344DBewwzBaak,FeooaA4CL4rXMa2bQb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2142178.272495	CUh46J2V3KI2cb6iOd	192.168.1.122	58497	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2APc64ZRTX92zlpl3,FWjqLt4Tsb4hbnHRo8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2142475.106027	COs5ef2YaerMAzKB82	192.168.1.122	58499	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fki8xU2oB72QkQ1Cn7	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2142623.227908	CI9gcW3F9WkBpKH8ch	192.168.1.122	58500	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FizeD74pVXTeskz3c8	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2142802.871127	C5o3OCMaIdZYlmNM4	192.168.1.122	58501	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpSCe33BMErY8hHkle,FxE47t1wY3dVBxhQ26	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2143409.542893	CemJESwx2tJYOovR8	192.168.1.122	58502	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQJBIO2DijDfD20dQc,FrgkXB2LppqgzRWARi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2143758.374993	C7I8EWeNsamYoNIZ5	192.168.1.122	58504	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5EqL13W6HAKv2nalf	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2143936.475959	CcAiB02oK4cyEmYZo1	192.168.1.122	58505	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7y6WD3CqMOKuFqryc	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2144081.810004	CB9AcX2PYNR0myNZ6e	192.168.1.122	58506	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFIAg03SqhHgvwU2Uj,F432dE2GMwXlVGyu3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2144639.481289	C7C7SC1EnyjUBE7UMd	192.168.1.122	58507	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAyqfVn6fm2yvLD2j,FyseTc2RmP76e28yr8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2144941.327025	CEh3YY2KD7rGiW0PH6	192.168.1.122	58509	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2zF262m6BG5fEV5y4	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2145105.436878	Clt5dc1xRZXY1pdGY5	192.168.1.122	58510	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FX4DA3l7HTum7irQf	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2145229.458560	CQal913GGzXYxDkL01	192.168.1.122	58511	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FM62osBvtLBsZCG,FX3IJv4h5Y5aQece54	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2145788.132741	CScOjf4MxojVzcOsqa	192.168.1.122	58512	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FE27nX1dQg1Ti35512,FtL9GM2e7TkWmkIm01	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2146059.960137	Cjt8NL3Uy5OcPdbQW4	192.168.1.122	58514	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8476D2yuQKxRfYpEl	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2146213.039422	Ce4mr82q0TdyWqXDXk	192.168.1.122	58515	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYMOPo2C3yPSveMSVa	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2146368.367316	CmfVvV3e9pqiE7RHg1	192.168.1.122	58516	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhvLs22SX3OzEaQtEj,FHVxCs4IGahFGNwfKb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2146993.045187	CwqD3n4CZJwtWLyI1e	192.168.1.122	58517	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FA8pG24Xr4oX2ztMcb,FVTWikRqCeWsSZWfa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2147343.890614	CGZmF41rAUWZJiXr3f	192.168.1.122	58519	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBhaLp3g4OnJT2dgk7	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2147524.005359	C2SPge3CVFFy22aCTe	192.168.1.122	58520	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSi8FU1MHN0nlXJ6eg	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2147674.333494	CLDZ5g3RTpSABOdKpc	192.168.1.122	58521	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FSyF2d4AdKYa5LXRD1,FIIqEIMhjGJJvvQZf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2148234.009316	CzWIcg1Ph3f9ZxLiGa	192.168.1.122	58522	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAFNb827gg4qbBlA96,FIL9b4kM6zj9ZHi9d	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2148535.862406	CTPlY1Naj7ALpyAk4	192.168.1.122	58524	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2b7q21ws3hXqI6TVk	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2148682.019431	CJH6op1WuRJlyk4Il9	192.168.1.122	58525	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXchcJ2PAyduOVLaA3	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2148842.344214	CKyeFv1jYxCQuIR6j1	192.168.1.122	58526	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwO4F42Xw9tlRKpif5,FaebOgI4pDiPuNuua	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2149416.028837	CI7tF141b6XXGFhSV5	192.168.1.122	58527	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiKycj2dMjhs0GFE6l,FVAuVO3hMbtYujbPu	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2149724.835718	CiY4kH3SBBmyJub2S7	192.168.1.122	58529	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fa5mFY1yvgQdYAlXud	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2149886.902736	CR5wOB4uxXBIOpQ9O3	192.168.1.122	58530	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZ1h7H3BKELXeZwbFe	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2150062.227872	CKP9FW3aZ5rfRfVKA7	192.168.1.122	58531	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVjUHg2GMQsEk3nAa3,FEA3Y534PBpLu7iq7l	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2150672.896300	CzEjFvH2WilyLZcd9	192.168.1.122	58532	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbkhKO11nHI564SoMk,FfIlDX3CAjdvsI5gTc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2150983.436604	Cxp73A3zjXlCZdDq7h	192.168.1.122	58534	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPwoMVRGPiOn2DFhk	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2151112.555327	CQWZ3I2sRSynXxnZRc	192.168.1.122	58535	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQK6pB3avpBAaMTXj9	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2151279.878545	CQ5FYT2ZvoT5veDDIl	192.168.1.122	58536	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1AuxC3YcbDdm8NySl,FNUagg2gY1Qi1Wyfc4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2151832.553241	CAYEaCUtziB3hvXPi	192.168.1.122	58537	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHqDKw15GdUexB1w83,FCMgyEA7A8DVB3vGl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2152136.379771	CnmN3FSuA5bWSN2N3	192.168.1.122	58539	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FnH20r4W0PwugIzX1h	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2152273.474181	CHwu743XasNzk5XBAh	192.168.1.122	58540	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRqN8O1doXzgYL1GO3	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2152432.816642	CeqWHZ2acnAJmak4Y3	192.168.1.122	58541	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fnk6HK1087TXCANzl4,FuLcuS5RJOosX6KD2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2153017.507078	CToTS6CNTW5zPlgD1	192.168.1.122	58542	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fuai9z4CKwnjevBKea,FF2tjH1zissOwSecwl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2153318.359243	CWVgjr1jzIDIDCA4Lg	192.168.1.122	58544	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FhZw1q3SPQurlcyo15	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2153479.508038	CSuWDB114TKFF5bAi4	192.168.1.122	58545	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMCSwQ28Vc5sZANJ72	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2153605.843129	CsxUxP2dROHJj6LiL1	192.168.1.122	58546	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FX2BL422viCjHDG8z5,FiI8xo15MLV20lgOVe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2154206.506579	CDxDkL2rrrVnRaICG5	192.168.1.122	58547	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJHVZtSCJmokWpsaj,FF4lWg4YTHAkSwekva	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2154486.392216	CmlV641GM56agP6nCa	192.168.1.122	58549	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4rP0q1zdFDmoi6nf3	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2154632.576136	Cse15V2G0CZ202VDvj	192.168.1.122	58550	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F82CyxuVrTjqzEXGc	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2154797.906556	CTbY1Z3td6uolycCCi	192.168.1.122	58551	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZzj552kDT0IRaNHs7,F6wQUI2QzpVHO3Jlej	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2155389.577726	CPh0ZU2FGiyHY6C6Mh	192.168.1.122	58552	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBoGDp1tc92GeduZ93,Fd9em51lJbCNhQXIxh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2155678.403085	CiKK3Joy3UowXgC18	192.168.1.122	58554	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FOqFHC17ZnXHSt0lMa	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2155843.496753	Ccpx1J3BhfVmk594h4	192.168.1.122	58555	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdKwSkKquDPgllNib	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2156009.829912	CJXqAr4lTD6Vri1dfl	192.168.1.122	58556	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtKCAY1LkaXV4m45rg,FVBaNl2rX4P8TI4oG7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2156574.511500	CGh0iJ2z98y6qndVaj	192.168.1.122	58557	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTlHqK2egjdRJqudz2,FFEhWC4PYrYD3XzCo7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2156882.981400	Cqw45q1NE8ZkewC03h	192.168.1.122	58559	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FcoD4agTPsg0FuaU5	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2157023.020118	C05XWP2Xu4tYghPAfi	192.168.1.122	58560	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FP88gC2crY74NFW3n1	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2157191.348113	CAiB0S24zkJZ4z8aFk	192.168.1.122	58561	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFM0K647iiGRI08dcg,F8mwRA3O6ss6kcqP2f	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2157753.035547	C2DeXtAQGj34XKyK8	192.168.1.122	58562	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRwOqn2VVlcgBMSzeb,Fl1EBCFuvP2lX391	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2158055.589992	ChlPZGeX1rkBpHgZi	192.168.1.122	58564	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FEXOmk1WX2xzBnBaO	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2158191.743133	CHTGFk1hqCGoId3297	192.168.1.122	58565	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmsKHl17gDTN0ZytZg	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2158351.075266	CoQxlN3P3eQLQ4aPJ5	192.168.1.122	58566	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCZGfH2Pa7Qjt5GFgh,FrO9w52tPdWVHjz1M7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2158988.752866	C1coXk1BLhdK9IwVnk	192.168.1.122	58567	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPWp8q2AiSyvCof0Y6,FjSyfD31Rt9zSRvTX9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2159348.553992	C8RL3R3HMAF8C7rJA1	192.168.1.122	58569	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FzFFpl4qIEeCxpK5s7	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2159510.598406	CCLpue4JOi5a8gqLLa	192.168.1.122	58570	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fmtxub11RUmHLxOeZg	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2159651.936179	Cu8W8O1grKqjR9Jrgd	192.168.1.122	58571	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5Wp7V2OZAnMNsuKsc,FXJVI93PAv9Sisa0Re	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2160258.598710	CWqSQo2jUddeP9rnv5	192.168.1.122	58572	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtEtpi3lBlu8u30dQe,FETgQOQ6KtHMK0Fk3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2160556.439996	Cj0ho3DWL7qHxCmT4	192.168.1.122	58574	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FbPpgA2e7OxvU7wlvb	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2160680.540543	CyTFCg2AbDklZ8z7N	192.168.1.122	58575	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FkRJe61pSS8qwk25uc	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2160825.873645	CG03pg2R6hGaaRl1Xa	192.168.1.122	58576	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIjUe1B0k0tw2BRv5,F2WMFe47idRDwqhouk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2161392.548694	C7oQVIDOOR5TN7m88	192.168.1.122	58577	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ffw0pc4wS28UxxMbR7,FhUif121cyCuuOXcBf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2161686.395438	CPrAiaHl6yUC5gCFc	192.168.1.122	58579	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fb7esn4PmNjFNtvq2	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2161821.552254	CeGO3M1EwD7duZz584	192.168.1.122	58580	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fg1kTP2fDnZTDr5v38	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2161974.876186	CkAQmp1hcz4vegNE8	192.168.1.122	58581	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5YdaD2nmtF7prw3Fb,F4fxsu4PLx6sp8vQIb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2162534.549924	CIMA8O1qQ9ArRuAYh7	192.168.1.122	58582	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNjnXovaCLP3Xram4,FPK3hP1KdhOowelALa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2162858.353422	CqqfQwFDgFvNqVdp7	192.168.1.122	58584	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FxyW2t4qj5iv7qQSA7	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2162994.407553	CKYKDx1y1n9IKdaQgc	192.168.1.122	58585	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmVOXa4vw5tjyhLLwk	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2163162.733507	C20DyJ1H3pyqThqOMl	192.168.1.122	58586	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIuWwir0JHOv4HwYa,FhMwA43WPhl3cmhtgh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2163717.531237	CCvjb33qUZMYX3Tu82	192.168.1.122	58587	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpTR8JoiTuG1Ilyyb,F3r9w5373Fckly6LL5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2164017.048094	C5ZYqz1IOyVkVpUyN1	192.168.1.122	58589	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FtStru3XUz1Nlu4EVb	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2164182.144886	Cqfj5e1Q5esa5B8r9d	192.168.1.122	58590	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FpDO6a38oQ358aWEnj	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2164302.471409	CdnIlJ0B6OaARQoU6	192.168.1.122	58591	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FyPvbL2g4IoIDXDVIb,FVZ4f45rPh636zVE3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2164917.145896	CMYIGy1pzywyeTQaJ9	192.168.1.122	58592	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYLvnS13ZgEq4vHOI6,FgQT3145diCanW6G8c	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2165246.955326	ColtqE271gAK7Tt3ol	192.168.1.122	58594	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FOHUaJCDJIm1nJ2U5	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2165406.049327	CXJ7hBHpHCysQ0ugb	192.168.1.122	58595	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fhj5rO3kwAzdCByqud	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2165531.379045	CtTvr03032R7Z6ZmGd	192.168.1.122	58596	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZcwvCXRRQA1JZGo4,FTWBLb42OBmxCOm1o9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2166126.044182	CSqpbo3XcOCPNz0MX7	192.168.1.122	58597	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FByYk44oI2xgBo0LB4,FJ9Lbx2yQuv7AMX9v3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2166431.891152	CKXIbcAJ143LFGY0h	192.168.1.122	58599	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8Ylri4dzCgBYcLFMk	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2166609.015120	CMRM0j2gc3HFmVdmj6	192.168.1.122	58600	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBg8mLazP2EP0J0kh	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2166754.357417	CCLmYs1Sldm4J5llGe	192.168.1.122	58601	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtWNCv4K3zBcbMXORd,Faf2oA4UtBpdR2QHE5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2167104.520841	CBI7qG2dhzn3N9J7J8	192.168.1.122	58602	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRDcv83z41aeFE90Qb,FI9dXc1plgD9MJCOVd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2167390.351273	CvW9Ch1TqITWxOO1N8	192.168.1.122	58604	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwVA8X3wq7A36nz0Hd	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2167549.467122	CKDOxD1DydO2ExXiZb	192.168.1.122	58605	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FpejsG1DdMELysXQd1	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2167687.799570	CWxQ1n3PYRgB0O9Sxl	192.168.1.122	58606	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FodmR3eaYBbZlbvy7,Fhb17RflZM4JsMVw2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2168289.483907	Cz2WO42TwSsa37iVud	192.168.1.122	58607	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQ67sV1XaxYOW9vBtl,F0jvVg45IRPBjBzfYg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2168587.305313	CUKJfK2yv4XzWaK68j	192.168.1.122	58609	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRkWMg2XstozgZGAI6	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2168713.409941	C2JXxu31M3SC9NieWi	192.168.1.122	58610	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYG7lw1GmUgcENs6lj	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2168874.736516	CA9y5x1aJsgWbg8xH3	192.168.1.122	58611	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fvd5Nx1kBie8JrKMxh,FQMlfg2lfsQgKoXe14	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2169503.409959	C8bcIj11ZyfovwaF2b	192.168.1.122	58612	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1EuXn1gdmAujYxbA6,Fe9Af42xuMphlCApU3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2169833.259064	CmQedC1bUnQclaAAo6	192.168.1.122	58614	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDzHlL3ymRMmf3cete	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2170007.401484	COOwP01aPnNWjlaFte	192.168.1.122	58615	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FTS3RD46axcKbY4SF1	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2170155.738288	CMAZxs4LcAsfzqAXec	192.168.1.122	58616	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDqNCv1iNnNH7MOwc9,F16wxV3d5xye7QLMQ5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2170812.412448	CokYf21tqjqeJcNYBc	192.168.1.122	58617	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzmLK02E3XpdzuKkO9,FVbx1fUejPG2IOaCl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2171118.917723	CuqWek4lce1TU0au03	192.168.1.122	58619	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpA7fh1mtn2pTEhqUk	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2171261.003400	CKX42nJCnATdVs769	192.168.1.122	58620	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fd0gBJ1Wmg7IPvnhZ8	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2171391.334456	CdUZBh2EEoOwzv2eah	192.168.1.122	58621	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFzZxo1m2Qq6QMz3g7,FyXdZs1RT3xAcEizX	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2172011.996848	ChrkLjsKsW4veCt67	192.168.1.122	58622	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEwLaT3ONd0ZwDPS5i,FPj54y4inxKzQfVp1g	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2172338.805886	ChRKy820vl7I2JvGWg	192.168.1.122	58624	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5DVfV2V8rUZYztzX2	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2172472.875103	CE4Kzo1s00SEXFNne4	192.168.1.122	58625	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNPrY71zPWrAfTude5	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2172636.204467	Cxp8Wq1rVvLtHuYNud	192.168.1.122	58626	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUMY574BY2IpUudmp6,FVVOFl2TukyFhGKbC	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2173231.870744	CpFoDP2ND0g7RUyTZ7	192.168.1.122	58627	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrRNht0AK20ierE7j,FKGWlo2UxpLddGvRlf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2173537.701589	CsCZIu3Puy2Jzz3nDh	192.168.1.122	58629	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fm8GaF3GdYGnGST0t4	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2173693.761354	CPZAwXh1QZj3tMDyi	192.168.1.122	58630	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FGsjXd48QARkEkqDvd	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2173872.101392	Cwhvcw4hY5vsGPzJkf	192.168.1.122	58631	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fg5XuE1cl7BnvjlJ0c,FswY7o5om1g5d5ZJ	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2174465.765219	Cp7fq431vD9JG1DYJ4	192.168.1.122	58632	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAqhfVvi2TVgQfll,FzVeFa4ULVIAo5Sl1g	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2174788.579726	CgFJtT3yaDn4wGFO69	192.168.1.122	58634	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fkbh1S1EGOwsuk9tGf	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2174956.636430	CBZf144d8oYpz4Pf4j	192.168.1.122	58635	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fwqt7A2VyxO3s5dGxc	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2175079.968195	CYmpl4KlYZxxYY48l	192.168.1.122	58636	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhRknD2zbLYomr7HP3,F0FeA43rzCOseHRwz2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2175653.632636	CwhWEl41v7MGvUtAK8	192.168.1.122	58637	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1Kleg4XuA5E7WugTb,FJ3JSI3CtEQYdUH7L9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2175924.479901	CXO41V3ZtKPDLYK20j	192.168.1.122	58639	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHMHYn2OvAYaEc6HOl	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2176094.582233	CbJ6Il3aKksa5N9y3f	192.168.1.122	58640	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXEwjWV7POlBahBY5	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2176227.908515	CbzsYLZE6fRPIjVa8	192.168.1.122	58641	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQUnDS3lCx4qLJp6xi,FFo3oV1q0YCoSyaOX8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2176793.582590	CkSESE20ZL8fms2BKb	192.168.1.122	58642	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmBFeg1JpZjKsciqb8,FjpbsO3D5eYNW4OKMc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2177120.423604	CVAGOw2nO0LslwirMa	192.168.1.122	58644	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FH8us12OLGgyC32qzc	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2177274.549906	CvmZqR1eMSrWrycWgb	192.168.1.122	58645	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxqASk328UkDxhlGAl	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2177485.355399	CTBYuG4fUA7WSAIz85	192.168.1.122	58646	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQam5g1vJAGcYQCWIh,FSTuWR3dAI6BjQhSs7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2177745.810611	CNccs12PsCUFI8FXOh	192.168.1.122	58647	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZpONa40agL20yAuy3,FQTIszZXQOePVZask	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2178029.315886	CDvbLc4uYfglW5Idg1	192.168.1.122	58649	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F22jzh1Y5g8Csjlibj	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2178196.395800	CBK4hv4OdtJTR1pvi3	192.168.1.122	58650	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJghAq2j6Dio6mUK95	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2178316.731490	CSqxgP3pZsn0d0re0i	192.168.1.122	58651	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiIhng21WfgrRpPTJ8,FxpH3a1IZWSeVYNdFe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2178893.400754	CiUUQq3PqTQ5mJxcSa	192.168.1.122	58652	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkIAOC3MCfhJdzlqk,FrCqv94H2MeoA4Xi74	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2179217.205538	CEqUjDz1K353L6Nk	192.168.1.122	58654	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FDHo972chLcZPWYIei	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2179366.277313	C1fBso3ZcGBZkQiQQj	192.168.1.122	58655	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FH34gD3zAsIcwbWWwf	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2179506.602148	C8Sxsp3kdMYRsp08Hj	192.168.1.122	58656	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgRWef4K4l1GFdbJy3,FtCa3x3UPIN2eHOGFi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2180161.283703	CwnIVl1dw1CYUKLLqa	192.168.1.122	58657	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fs4B3tQX9A9A8rSvf,FAe5AglqaMaZAodrg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2180459.800941	C4eGkB4q4S7owNyvZd	192.168.1.122	58659	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7aVyQ3J0wX1Tf1wHd	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2180630.896317	CR20k03U8B7tlmfpDi	192.168.1.122	58660	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8frWo3XTCB27EIDI8	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2180773.223392	CIJ20w1REZ8bAJqcwe	192.168.1.122	58661	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7OUJ92lsnXaIAJ627,FIkYPk39hrc2pwt6Dh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2181385.894429	CMjZ1F4P8zsW2Gu0J4	192.168.1.122	58662	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FeDSHP20yu702oVlO9,F7jIXU2P04rQP69Mob	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2181659.708532	CE9VVh4nhTLK7uNNxa	192.168.1.122	58664	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fm8DFg4dHMb6mHKVY	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2181834.776848	CJICRJ3FsiLDy2hMRg	192.168.1.122	58665	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIMuLJVfkccEIGVW1	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2181982.111536	CqEMVOul3xJM2ZOak	192.168.1.122	58666	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FonueE2AJlrgH2lMjb,FVKnBD24RoPxus4Zif	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2182620.779820	CJIAZ91HEl6VjzrUJa	192.168.1.122	58667	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FN5z4P1PEgMur0vzfb,FZer3q1rEzT73epqJ3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2182924.284581	C5acdD1uNTS8M2Ppee	192.168.1.122	58669	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F3squq3vBrkEzmz63g	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2183055.340430	CN10hCCqhrRowdUMb	192.168.1.122	58670	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fe4wF714uQJppnaOch	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2183195.666546	C7Akqt4IZTTgv1W2r3	192.168.1.122	58671	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FL9YfK16F7dgMElLje,FSMD3w4nApWE22i0Cb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2183844.349220	CIv9W66FQgF0tSLj5	192.168.1.122	58672	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOHCGv2g8IxkZpN8G2,FwjhwE1hNUI15Eu5Tc	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2184204.172786	CoYxzv1MFSkXUiWpO	192.168.1.122	58674	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fyf626153fCbCP4Lr5	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2184355.279447	CuBB1e28rB07TNsTuf	192.168.1.122	58675	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fje8lo3uOnB8FFGOo3	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2184496.616880	CqLfRK3qzz4Ts2B94	192.168.1.122	58676	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcFwpg3qZ9vmRs0Hvk,F2NqTH2v30IgH1JEbl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2185037.294501	CHBolB3cq31il3QvXa	192.168.1.122	58677	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoylEA48AGZglCAzVb,F7ZRxs2oXeca6q3uO7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2185357.099784	CQ3TEG3MODKWeR48Oe	192.168.1.122	58679	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqC2OvrjrCZI1OKWg	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2185481.178096	CGJStk4HWn2cCtDoG3	192.168.1.122	58680	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMsKBt1xOeBDMTYVRj	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2185602.516780	CFd5bW1ID8OZCLJLj8	192.168.1.122	58681	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FePvNJ3QW7kArd7an1,FGd5HyGTMlpDCO5Fi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2185893.685628	CsCGn03pzojnU9isU9	192.168.1.122	58682	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVAotJ3gpZgIXAKOAh,FrgTrWmg7BBb7Hidd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2186157.478779	CWqmOu4c8UXYBcIk94	192.168.1.122	58684	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTdeij2nrMPhEF5oP7	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2186282.531191	CKXp3q44qBSfaGQ32g	192.168.1.122	58685	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FC6srV2AGVTSjac2e8	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2186411.860703	CRt7Ko4oykS44jxEO3	192.168.1.122	58686	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZeAEw3J4JB1BY6J1,F02f8C4YBJ9yu0b7pe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2186968.531023	Cb7g201T8U6hEsT8Mk	192.168.1.122	58687	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmL17I33zwlFLq0BJi,Fjcnyx3MuF7W7QQcD4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2187310.036118	CXDIIr1aWuI094dx3i	192.168.1.122	58689	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmMRhD4yuxyRZQlGt2	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2187463.127876	CmdTx94qtw3bj1SwM	192.168.1.122	58690	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7YuLH2BFV56ycyWK1	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2187611.465543	CFIVa04mVUn6cbFTS	192.168.1.122	58691	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5cOmb3EemE402ARa7,FLRcT8297nmRTFJrR5	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2187929.632775	CiRb9v2fUzqyrXMAY4	192.168.1.122	58692	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJRDNg2jvMjjQbiiLi,FhhUP54kmgYukGAOD5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2188213.498460	CUjBrd2F7bmG3TdvNa	192.168.1.122	58694	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FjgXjAg5veyUEmRPf	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2188340.639536	CUt7nt2phm2Zha6NMk	192.168.1.122	58695	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNSM2b4mjb4YBfuY42	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2188473.975233	C4s1hr04Dmg9WyTJh	192.168.1.122	58696	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0zdFI30Bdyo6Vp5z8,FXiQK19ViikSuAiLg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2188787.135912	C6n2re18DZDJBoClKa	192.168.1.122	58697	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhovXn3pxMLxtq84C3,FHoOFQ2I0WLHowTHh8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2189116.668771	CZJhJd41x13mDZvR3i	192.168.1.122	58699	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fp4Jss1c6gKJf3YqG3	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2189272.769504	CjZHQlzaPUVXDNfUg	192.168.1.122	58700	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FxG7XP2ZfARZzBYxrf	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2189434.105740	CB1Unm4RbPCLBg4aX1	192.168.1.122	58701	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZ1Bsj3wTxqxViTQdg,F19E3j2VJik8NuKQ	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2190023.783773	CMHsK93pIRYMxg4WU7	192.168.1.122	58702	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbuBsz1yYtoQFsBEJc,FVODX035wgOLQlHEil	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2190332.625808	CoeDfA4g42aZPaMCkf	192.168.1.122	58704	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXaiwH3B3BmKQjx1Me	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2190463.743576	COd0Lw21FryKnq6D3d	192.168.1.122	58705	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FeKPZ04k6GSER4qczh	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2190636.083980	CkIBxOwnN6KMzeqUl	192.168.1.122	58706	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcFx9b3Gh8oS35e3b,F9LoKA1E678p0xFto7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2191204.765035	C0nDpD4Rt4gqYtvBbi	192.168.1.122	58707	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5LWCN3izDBB3DpI88,F3sLmBLSMcbj8EZEl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2191490.562638	C63Zoy3rX7hpIq2Sra	192.168.1.122	58709	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FfBpGy3QaXi8DmOO3	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2191657.621151	CL9Hy63ezHvvowKv48	192.168.1.122	58710	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fmkg8G4ILRoFNSpF0g	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2191785.957498	CaZHPV1SngqoXcEIhi	192.168.1.122	58711	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fvrjvt3lgnA3Pnr1af,FRK8ep1rFR5ApUHPOi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2192431.636056	CrUApP2H9nqg6rIgRd	192.168.1.122	58712	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F4CzzS3LC7WXNmsLla,Fyltmf1JDqUbIzEJtl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2192716.450313	CxAMzx1ZZaJb7mJ6l6	192.168.1.122	58714	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FeGPw21bvhkx0EJYr	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2192862.541731	Cz7JJh4X3Z0XqpbZa8	192.168.1.122	58715	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fu5n7W381JpJJV8ot1	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2193036.875820	CZ31at3ZMElNfv0oMd	192.168.1.122	58716	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5NW9k1k3qszcbf7ti,FXHuE9uaKKkWyQo17	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2193650.558213	CAyxH040AnHHj7lGDl	192.168.1.122	58717	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOgQAc2BQ1X9udhS65,FDm9XK1NpJ37jCHB64	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2193950.400982	Cjyxfp18rEsenujFEh	192.168.1.122	58719	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fbp8d1UyuFMsAlFS7	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2194100.521974	CcTDuP23ODI9GZqni8	192.168.1.122	58720	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Ffl99x2afYYAQQLUo9	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2194275.857169	Cp58M34L6oSKgKkzbf	192.168.1.122	58721	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FramBu4XxYxNSVqv4g,FRaSn73s3KI7PirXW8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2194617.027738	CYW3tf3e2hJNn9KDef	192.168.1.122	58722	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8J8CZ2UM5BidaNZKh,FRXJtsnq9onM0AD3j	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2194947.568963	CBcds62AdgAXBW7F72	192.168.1.122	58724	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FtDpFC46YhaUpp1wSh	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2195124.723582	CjnkFClj0RqpfWqNa	192.168.1.122	58725	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FmnwF032jWuB2Kvksa	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2195279.059520	Ct2MEF2n5gsPBCVlWi	192.168.1.122	58726	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F95p7r18ygPzExefG8,Fy2y7q2mQcCarHqeBk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2195871.741659	C5gb321SuhorH2nX4i	192.168.1.122	58727	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FscTdHY7n5FPH93Sb,FW0X8x4P3GjXgOP9Lf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2196155.566463	CWLh9v4OZKd9pMOcdb	192.168.1.122	58729	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FvQRoETIoGfuaJnBa	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2196320.683152	Cmf7jM3i9pGTcbf0da	192.168.1.122	58730	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FUwdrO1pGANrUy7NHc	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2196447.016118	CvPBLv3il8WasDRRNi	192.168.1.122	58731	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FtfZ284AY5wsNLKgvd,FMnrrq2JCTzEkMr23f	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2197038.721944	Cg3HvXE0ge6SJsD44	192.168.1.122	58732	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FgFdZwKieNMNSkNoh,FMvze41z0B59AioMkk	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2197323.554623	CyNye72X2bpAgry5M3	192.168.1.122	58734	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIlFf11gKREaA4slfk	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2197465.670250	CoegKJ3eEwFggwmN8d	192.168.1.122	58735	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FH81Mzg4bPkGDTaif	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2197596.010824	CR9yFn1MKfpGo4jN8	192.168.1.122	58736	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FCOatF37UBioWs4kte,F0aSwp3CdF3QDobhhj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2197895.211118	CQ82mD4gavjmT4EsKd	192.168.1.122	58737	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDvfo62t3neLNwTsmj,FttD8t3uEEfLGa3E4h	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2198190.031213	Ch6ICi2C5T00bsSFze	192.168.1.122	58739	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUE0jCc5uRt1E68kj	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2198331.134200	CnvEBDryAuV4yZIn9	192.168.1.122	58740	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3uBBq4mbdTLSvmkFf	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2198479.461081	CorGvw33JqovM6YB3j	192.168.1.122	58741	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fdbdkl3ap1XKSc0dzf,FWfLdSXbpSX9dXMWl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2199022.141306	CNzGw63ungN5JVR91g	192.168.1.122	58742	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLZwDrm7D7GzhBIB7,Fxowi161tLllco8Bd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2199358.941932	CqmyoOpILf0c8Rck2	192.168.1.122	58744	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FaNuMu13jCZUUql2s2	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2199501.997570	CFE9cP2wUFMb6Zaq3k	192.168.1.122	58745	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0duBx1nl5L93u00Ne	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2199638.337259	CH8jP5m43y3oF6nR6	192.168.1.122	58746	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F11oPOjyLiMubgjD7,FrQ0Y31VRQxA6DMFbk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2200230.028426	CIY5M63Bh5QPGg6F7c	192.168.1.122	58747	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNiwoB21DNU7MXKKTl,FgbSiA3Y57xFc0ECn5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2200518.546850	C2PVl53ybIrjIYSQDa	192.168.1.122	58749	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fs8ux2qGfq7LI290h	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2200682.644421	CkmO8x1PwVeE1JVqv	192.168.1.122	58750	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FN9SM03d0Gufus1GMg	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2200848.977830	CD84Fq463k2XgUKlL1	192.168.1.122	58751	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FL7rAt12tEFjfD2K3d,Fg0mXl1MpL9WkWsnFd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2201391.668806	Cj5tWs1DIpRLsUbd2a	192.168.1.122	58752	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8rNr12wrazwFDosEb,FNC5D41LHCFXwkOQP7	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2201708.477273	CPVWy533xBoetpsfI6	192.168.1.122	58754	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F623eB4dJhdO5PN2Fk	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2201834.570983	CrGpkx4l1svz25ybAf	192.168.1.122	58755	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FURjpYfEdL73rty4k	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2201984.911097	CiWJmc3gJ4S5iLyB5	192.168.1.122	58756	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbzKzg1lm3OolO6xl2,FIK5sCBHuMIGzSR03	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2202549.613079	Cqnncl4x5MOzQy2wqh	192.168.1.122	58757	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FL7uak41skaeaB4LZ,FHlfza3AJOPCjwjJYa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2202836.438087	CVWcaYPbyTCeBZU3k	192.168.1.122	58759	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FECGtT39Id7Gb9NpPj	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2203004.523332	CNcxNZ1GpZu7iOsu0k	192.168.1.122	58760	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FYoe1fqmh3PU23bT6	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2203128.865689	CRez7e3cTsIN6pzVld	192.168.1.122	58761	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9vUZK2d12VrkBRM5h,F6MQ4f3RDrIAjQAR98	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2203710.552202	CboWCEXft7UM8OBid	192.168.1.122	58762	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9yanf4XmcFKk16B6,F0drBMKC8uw6oghs9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2204002.394031	ClFYFGpa6ZA3DqSlc	192.168.1.122	58764	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F56tCn47N4yk9zfGt	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2204160.525631	CFEyNW1wssptCVI2Ba	192.168.1.122	58765	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FftwjjVJoNUbvbyfi	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2204309.875133	CPmPTk1JFZLpubYuR4	192.168.1.122	58766	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNdZHt2KeFGJih3mI1,FZL20z2NmXZurgVTT3	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2204932.569378	CLTP2f4qq8VxyF4qKj	192.168.1.122	58767	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fpf3SP2o4T2A3Wwok,FyjVZd18CXAUZWnZF6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2205225.415348	CEittB4biXsedyov5a	192.168.1.122	58769	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKvpvp16JFu91grCDg	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2205374.521721	C56SYC4qiexT0OilVb	192.168.1.122	58770	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Ft2Qcv3WxyAtXCTiV3	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2205534.855294	Cg0x611sMBWvhuVoQc	192.168.1.122	58771	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FluewFMBQ3d4auUN8,FTm6p04oDiItveYKKj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2206156.539010	CSfYUF1SHzDCmVtsqb	192.168.1.122	58772	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FFyFTh2aoiHEhyMvQj,F3IZwjhd9b8vdueZh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2206433.050642	CCjQcX2x3mSXid2EH	192.168.1.122	58774	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7hFoz1AWmpKJpBiPi	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2206566.124754	CnoqIw120vPYj80Yt2	192.168.1.122	58775	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FvufsN2UrfTLQyghf1	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2206742.461406	COFhsU3AX4T49AQy67	192.168.1.122	58776	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FIVkm14RpB6gmb0Iwc,FpXyuI4cjWxSa3tGa	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2207027.661569	C0Wp4U3LAN5zZ2vtd3	192.168.1.122	58777	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5FuR44apn1pY6cUKe,FjJlxP3YXqyEgsH2h8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2207349.468182	CeEHLC1fOCuYCxU5W2	192.168.1.122	58779	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FugFYa4dGv16o08Aij	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2207524.532703	C8GTgSbw7Xi0iMEI4	192.168.1.122	58780	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKAmSG1VeakU1k5TRc	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2207650.867636	CZ2T9T3ZkXb3VGnxCd	192.168.1.122	58781	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbBqPa1OVG6QzDlWi,FYO9yacQmflhQAlOf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2208258.561334	CgychZgJipgdYOsr9	192.168.1.122	58782	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAmG054OFIv7isglWg,FqdjYA4VfWHI3zACXd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2208557.427989	CRqPS4281Vanyrq5S9	192.168.1.122	58784	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FJefwT1MjPqP61dIZ7	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2208719.570996	CPVPZ73hGSUIbJrRu1	192.168.1.122	58785	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FDsmDk1kUXtuoI6oP3	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2208852.905803	CXSfi42pQj6PUjxu78	192.168.1.122	58786	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWTuh61zqtFeNNAV8h,FkXCLsIHchE6hAtg6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2209509.599987	CEvvD33nfHpwYRFa2c	192.168.1.122	58787	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLK8Jz2oNmLC9ZVs7k,F5q4u8GDbziBsauDl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2209805.106521	C9BsYY3q6UZXQNkmFc	192.168.1.122	58789	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FIMgX22DnktHXSvea9	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2209941.177312	CXJqE91hJttihCPGre	192.168.1.122	58790	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdMTFl3nzMsHccpZOb	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2210091.526443	CHm7WP2dA780JDpfkl	192.168.1.122	58791	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9iV643dXKwBY7EFSe,FVGcH54bIXLnji3ntk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2210442.701569	CHk2WL1txNbtQeA5ya	192.168.1.122	58792	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FP60fl2tsL1CMUIYy1,Fn4aid4tlmmMsLJLj9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2210742.499607	CPOX11QJY4NPo9rc	192.168.1.122	58794	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTqiIA1Jw7CSovgnx8	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2210873.587353	CrQW5o4OhhTX01b473	192.168.1.122	58795	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fbq21k3GPkwXStqIne	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2210996.928837	Cx3vMp1VaFJ4DQMgYe	192.168.1.122	58796	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fad5IK2MqvJFpdGc14,FsftjNzIBQghlGep4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2211324.118901	Cm8zHa10ojBUs8eCK9	192.168.1.122	58797	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FefJVu3SYi9RZBRsc1,FyuMoT3a7nnAxZuGTi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2211624.941952	CVZqyo3AyVfTtfhdl7	192.168.1.122	58799	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTEkHb4HqadhhFh1y9	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2211799.037441	C59gpI3fADST9JVIi	192.168.1.122	58800	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FywGzy3xESWcd0QKra	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2211940.365069	CvsWcG1nmX03tW7VGd	192.168.1.122	58801	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FucMwe1OlPgU1xAmNe,FeGrBz3u6NU0gucTeh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2212481.052487	Cd66qd1Y9yLn1I4Y1k	192.168.1.122	58802	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMFjvl1Xs7s9xi3Nsc,FWuUW2CF1QldZTH1i	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2212787.884898	CYpb8k4QFcFqxqUEya	192.168.1.122	58804	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FP2jrM3d6u4zJUHEc	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2212914.982098	CYpHFN3Md9zHhZU7Qc	192.168.1.122	58805	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1DO2Rwdpm2uqJ8Ic	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2213054.326456	CImPudGN5r3Qbh8x9	192.168.1.122	58806	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fh4kVJamMHaImxmul,FA8Yyk1RP9gqR2jkP9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2213656.001692	Crlr2p14666IRzcvh6	192.168.1.122	58807	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkCzgv7cx5rP6oFkj,FLYLxI1rrCDUFrkfdj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2213931.816177	Cpp88V3PjNHoYjHJh8	192.168.1.122	58809	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FrDwbe3ktnhLpEZZ84	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2214100.898221	CxM2v03BBUdQ6Sghzf	192.168.1.122	58810	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F1tf2T9Of0FWnjkDj	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2214226.241465	CUEqeF1Zl4ItEj1gp9	192.168.1.122	58811	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6kolOlGRwJOE1JVl,Fcs4dtbQiAJZkPz76	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2214825.923673	CEwTWpWakHKHlxCqg	192.168.1.122	58812	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8OYWzZ4td0oE0j25,F5vuqK1txguJLtoiMh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2215104.443826	CwjrOS3w3urAkwoAGj	192.168.1.122	58814	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FwEimG4rSQPCPOfo58	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2215271.551251	C6Kmyu36Sk6KKB1KFd	192.168.1.122	58815	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQsV937Yx4wYj9mQj	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2215407.900336	C0ay0V1qNirKxxaaZb	192.168.1.122	58816	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhINcQE8QFeXn7Zdh,F1DTUw1kSXuPG2QZnf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2216014.582717	CPfhPONWrphc6s87f	192.168.1.122	58817	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fc6Yfm2wP7yw1LofQe,FMJ81q3NaPkwlQfMIb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2216284.398010	Cw5UyDpAl50fBvLll	192.168.1.122	58819	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Ft5kkP1pIjuT460Gi8	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2216444.476909	CEv7m4Wly6tUCKfui	192.168.1.122	58820	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJBX4s3jTIcSR7qX6c	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2216581.818050	CVE3l5qCYFubAtzsh	192.168.1.122	58821	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0WrDS19wdPGqKKu3i,FUoRqM3ILgTnpgBnb9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2217212.505118	CHYB6j1GXO6wVRuTwb	192.168.1.122	58822	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLV93FwBi5suK5XJb,FQaRXi3nqgyyr9WI23	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2217535.298390	Cd5Kbf1pG0GGXhdsGl	192.168.1.122	58824	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FEqXx31o0jcPYD9Wra	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2217661.356145	CMKp7y2otNdQBGaruh	192.168.1.122	58825	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fd8mqkxDS1x7SQCs	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2217795.693439	CbRQ6F2Djw5qG6ilL1	192.168.1.122	58826	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTJftF1YHJRZdu3na1,FyruyHrqEhNgaLYxi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2218391.380169	CQFbGk3m9UtKdPTEoj	192.168.1.122	58827	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FatEGp1n0N8G2IsB34,Fkn78t24XhUrcageu1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2219007.404180	CG7Ok51QagbKfpva6b	192.168.1.122	58829	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBsNb93lcoxebS1Pv8	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2219175.495107	C2vJB75zQUDxdY14l	192.168.1.122	58830	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKVDZuGidJ3tKtQyh	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2219297.831812	C0e1Ro2NM4dZqsjfK4	192.168.1.122	58831	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjGCdLng02mZHDNzd,FVgjLP31G7GPyQiQl6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2219886.539950	CLGLgZ3qOud1q3mh7l	192.168.1.122	58832	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fzogzf4d5rCpOschk1,FfomlW30GDftWol2U4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2220173.054591	CkQoQF3QQzgsRMqcH7	192.168.1.122	58834	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FUliSX2FNRPluxWI57	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2220350.114721	C1y9eG2WmblRhadLTl	192.168.1.122	58835	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLup2e3mNOFm2hJlbe	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2220501.454528	Cue2v93Hq6m2KV3z7d	192.168.1.122	58836	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxFMNA4zJvPKZEOqR3,FmMMB53eFfFyCFgz38	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2221078.183269	CNUrwDeem68BaMLDb	192.168.1.122	58837	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FxHDqs2kM7HDz2Iepk,FR3GjuQOy4wy8tnvd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2221331.025672	CG1Dau1hnBr0nfMctc	192.168.1.122	58839	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLsalsWXRrvTwsmK1	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2221473.136546	Cz9muJ1Lz6ImQUUqcb	192.168.1.122	58840	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FJLDxz1KXry9xu675l	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2221616.467149	CFEMfE2T7DSR9UKOtl	192.168.1.122	58841	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Ft5R1GqSazTthciXh,FramSG1fD47bTjfgqg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2222225.162485	C44nTe1ruaZAwlX2j6	192.168.1.122	58842	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbTa0sEeliUd9X339,FwOcFt3N9vgpjrZYjj	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2222528.967348	CakPs22qNGi1MNPcF2	192.168.1.122	58844	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXMjKuR3VbCrWTYwh	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2222684.048553	CmHrGv4RaFGdNNIQsb	192.168.1.122	58845	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F53T9d4EDXlROGbeZ	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2222846.384763	CEonUG1m6KwMFZQLgd	192.168.1.122	58846	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHXtJ42yZXd5n16pZj,FA33vF171jeElwv0Jh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2223438.076125	CkmbHr1oVxhsNVvmNf	192.168.1.122	58847	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlAwDg1SPbtzOJ8Nj1,FSsVXeeiQlIkOBWH8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2223699.871831	CvoKyI36XRZzGxEJDi	192.168.1.122	58849	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F8Yn9u41VjM3eSsQRb	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2223820.953093	CB6XhG3YhCO22C0di2	192.168.1.122	58850	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfAMYZ2GpWk4jYxP9b	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2223959.295613	CW8OpXuU1OyCBNGXg	192.168.1.122	58851	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQvlnR3GT96VJ4YaMl,Flxko01MiM0PFpAZyl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2224516.987239	CyUeUj3LrwJiVl07m8	192.168.1.122	58852	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMmKOG1bKRVnet8WI,FcV1iQRNxl9R6dAZ6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2224827.800206	CCmQzaCAuPeGhE1xl	192.168.1.122	58854	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fox8pXxRrwharbbA1	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2224973.890039	CvhvtCm75XAjyZcb1	192.168.1.122	58855	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FU3JkV2jyIKGccKH7j	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2225102.228743	CMcErT3J8CrLbYQZnj	192.168.1.122	58856	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fcg4ff1NlAlZCFNwDh,FDFyey1khmIkDZHNS9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2225644.918879	CO7ecc2eOcblvT2MI6	192.168.1.122	58857	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhlHdw4gV3wAHQyBqd,Fk0uZm159WWK0wP6Ue	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2225919.716162	CJx7HE2mrAzwlccz29	192.168.1.122	58859	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPpasa3njQ53myz1Gb	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2226053.782432	C9kL7l4fqWSwmCnlW8	192.168.1.122	58860	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FiADGe2Rq4Ed79m0s8	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2226227.126547	Cn0zhL22cX50WyMbWg	192.168.1.122	58861	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1aEjjkOeeqZhjTS6,FWFe3o4hKIXj6TiSX6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2226486.298395	CerBnr1n2eDoUxP7O	192.168.1.122	58862	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZBzIP22i36iRIypgh,FbB1AmXjAzBv90Fdb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2226792.115977	C68Ksm4fLsucgifrR5	192.168.1.122	58864	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FahMXm4yVFab1liOVh	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2226927.178148	CDbCV91Qt5uIZcOvY	192.168.1.122	58865	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FzpRZf1ZCG4UOgTEA	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2227104.518515	ChsKnc3cA6c8SxMRPj	192.168.1.122	58866	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkqoXI2x3pVwicVhj8,Fo0XYj1EchehheeW7h	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2227745.208812	CigvaN2YeEkzN2CGmi	192.168.1.122	58867	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMAdFiFIzFDhYkmp1,FKDWljMOgBRpPtJp9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2228045.023113	CChw0gETp418cxdSi	192.168.1.122	58869	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FNAme7h7XZJQhy866	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2228169.165020	CbjN1Immk4Xl5Ry0d	192.168.1.122	58870	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FR9NJjGEDsibcAcel	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2228326.504668	C1RipFvEANnlJ72t4	192.168.1.122	58871	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FYbKi42pWjLt6DUcse,FovdXu1tdvack8uLnd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2228886.189136	CVA7J73Ye6dTAplwXj	192.168.1.122	58872	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FULqga2IttTllv0Hy6,FMTifK3gAIHKgOK1cf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2229206.976450	Cd9yp64eGVNzAeo7P7	192.168.1.122	58874	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5jWY03XFVdM8GxMHc	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2229353.086059	CVfZ8i30mEBRWsWsS9	192.168.1.122	58875	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F7kWFLRkg7Gg9Xpi8	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2229504.417689	CeNZd91QKxNhAVSHYg	192.168.1.122	58876	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhU0YS2WKNgzHbTLG4,FwTJYR3ajTk5DvFi7a	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2230103.116119	C05IxVFSe7n5kOIA6	192.168.1.122	58877	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2mZLJ3hhaTKr08N6j,F0thrs1SDtViyYzBIa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2230405.912715	C2YYS131VTbWAHqXB1	192.168.1.122	58879	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FD4BCN3PD1Pa3i2P2e	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2230527.035576	Cf94ZV2Y9uUU4po6V4	192.168.1.122	58880	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FfatO11iRVmtgnhb7b	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2230696.371937	CEoNirxPAK71t48s6	192.168.1.122	58881	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FF56YU3GnOp9v0DR37,F4k2Wr12YC517nSFGb	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2231325.045590	CPN5qa2WX8dXmBrwn1	192.168.1.122	58882	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMJ83RnK0rHDLCYh9,FbicF41w5OtB560Wpb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2231634.829151	CBcIC2XGhHsWFc8Jf	192.168.1.122	58884	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FtEPm33j6F33fTqGEg	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2231797.932287	CDQWPh3usFB76zBZdf	192.168.1.122	58885	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FlQMHNNx3AFsB7uC4	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2231929.284272	ClXzWAAYs4vqonlA9	192.168.1.122	58886	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FoYdsy3Rpe2dxwzw67,F0jSOu3uulzmgzvss9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2232273.459521	CtsEclVcKhGXoml2b	192.168.1.122	58887	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHndcQ3n4POVq8Q8Ai,FuEmKm1fdFWYplq2C3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2232561.269989	CbbQQn2h8Btc0FLPI1	192.168.1.122	58889	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fslo7d2NlaVCqHVDZb	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2232688.382856	CkXlKC1bLq0dcBlw18	192.168.1.122	58890	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBB3is4jmsH1v6ZIR3	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2232828.717689	CRcxxu1kzjmaMMJ1s9	192.168.1.122	58891	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fki80T1UxI4iLk6Iwc,FdFIo145C8td1s2cV8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2233375.404052	CbxcSA1cdpIbF8T33j	192.168.1.122	58892	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9O7562E0pGcUzQw45,FUCYuP21cqPDBKMNsg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2233696.209440	Cftrd72x48hABzXgC7	192.168.1.122	58894	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FeyivN1ekxPR65UMVj	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2233873.316433	CCPQzy16XIHP9kihAi	192.168.1.122	58895	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F02iwY1uOY1KR1Y7f9	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2234038.657328	CvKNGT2fCXRGDiu0G9	192.168.1.122	58896	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9jkxr2baO7y5fhc8j,F2kuuYeH5qkEcU27k	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2234693.348601	CaE2Kr4F15zBz6m0d9	192.168.1.122	58897	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhTI5xrelJnYrW1C5,FqR7rqVRYv0u0zkm5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2235005.127614	CJqHj2reN49esyhwl	192.168.1.122	58899	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7AXX81AvgySg0P3T	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2235149.220928	Cijn8z1xG9FYLQeiO	192.168.1.122	58900	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FioZB22Tx12TvdfKjd	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2235320.560373	Cl9GYB4dPWe4N5w7u9	192.168.1.122	58901	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FY2u6W2QreeWel3vpi,FWIW8a3cGAoroByixd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2235884.240871	CU6zdf2UjsGPPxBkKg	192.168.1.122	58902	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrC4xh1lldllr01xPg,Fk23vK2CEcZedl2VQd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2236231.044264	CD3HMn1XMTZYMREeQ1	192.168.1.122	58904	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FoecwB34XF1Y9EumD	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2236401.160885	CxuY6r1K70yAlrxCWi	192.168.1.122	58905	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0gApW3DDRJKSuTWQ	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2236560.503049	C9u51UpHWg1lfNJc6	192.168.1.122	58906	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FiPVBa1V6vYaAlLO66,FHlAZW1YDVBf7cdBAf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2237106.197666	CRuEdQ2ueQh8WXUnyl	192.168.1.122	58907	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FrfH6s4k7YGcRSmw1j,Fk8apX3dCOpBWEptlb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2237415.021546	CuJfsV2F4GOYCVQULc	192.168.1.122	58909	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FWR3Q42KlJKYJr7gv8	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2237570.150512	C8huAo4il6FL5ucO14	192.168.1.122	58910	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FnkDsS3oB69kgyKEtc	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2237692.500571	CFyi4c4WbckW2p8Wm3	192.168.1.122	58911	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FDLHqb4zSNZSeo3CEb,FO7Zze20hTPLIDaP58	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2238342.195001	CzjWzP2gzPJ6E9KZpi	192.168.1.122	58912	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRYU0h3NuCZOHICHZ7,FPk4pSRB4dhs46ij	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2238657.662195	CrOmPmOOd9NFJPzY1	192.168.1.122	58914	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fcb9YG30OSKK2aOZU4	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2238811.726596	CPuJwl3eg4i3kNzid5	192.168.1.122	58915	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FPtK9k2nPfvXKDTMH6	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2238967.063215	CYxDuFKmidYv2ZQ6d	192.168.1.122	58916	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FbTna3V2KN4Qapxu8,FLAvgv6QBw8iUVAgg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2239522.772252	Cb4gXRcPTXMIZK1Fg	192.168.1.122	58917	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLbGrg2ZMrILFKrYol,Fm1Ywk12TEdjPu0D8i	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2240143.767257	CIIw5WENQEuuYgS4i	192.168.1.122	58919	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F91p8v3JZKt8jJqG7l	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2240276.874738	CfheE52RrColQx2Cwb	192.168.1.122	58920	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fi8OEZ3xXgFJSwGdUa	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2240405.209963	CWopS13lW073BWyXi2	192.168.1.122	58921	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAaWiZ26rTvhJYTOjb,FNbY059Rlzndq6xXi	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2241035.917701	CLjvE33HLiKVcO3Gv	192.168.1.122	58922	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXYCfC4uatwOEBnR7i,F5Vdw5I5173GA7xG	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2241302.695561	CvWyOC3VZ6Zsq1MWGk	192.168.1.122	58924	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fk9oABquCyIM4UId7	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2241455.767466	C0B5Xb3q2vxq2ifelg	192.168.1.122	58925	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3yZpUyIfREkk8SLf	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2241627.107807	CM5aEN1loZEN8aVkp6	192.168.1.122	58926	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F57qV64qfiykK3kdq6,Fz0kND25MQ7gg94qx8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2242197.868887	ColmCy3qj2TVZDt1wb	192.168.1.122	58927	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuV2eN3UGEROJFAQ36,FJaYXfwGpqQ01O5Wh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2242503.668489	CDvxFL1oQH2Wf7cDF4	192.168.1.122	58929	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FI3UWZ3iNaeIxTwh86	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2242654.791503	CINdVU1mobMnGGA1w2	192.168.1.122	58930	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0xv4c3Inawgasm1p8	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2242799.123029	Cnmu2E2ElqajYlVLgd	192.168.1.122	58931	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FBIKuJFdT4xPcmvO3,FmhZnJ2V19VHMJzy4g	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2243375.862030	CXEXWdC7TgcGBIIwh	192.168.1.122	58932	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPWK8K80XDW9Rxzc1,F5yoSD2tFlSnbhRBq9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2243673.637699	CjGE2n1eVJzYbLD11b	192.168.1.122	58934	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FRIaxh4yn9Sg0ycFC4	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2243839.123915	CrcOFL2A9rEGGoLWEc	192.168.1.122	58935	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FZS9Z21tPkrJaSDCH4	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2243968.464075	CeelQJqlzSaDSVS6a	192.168.1.122	58936	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fmm84i4zdPWKeV3jUe,FLeHwV2rVU3sHFLAW	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2244561.216371	CVWsxe3TjdfwJykWp3	192.168.1.122	58937	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FT8KfPzvEr3Fw1Duj,FPsoJt2ZotuUVfDDG	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2244878.011102	CPAP7v4m04Axd9UMb8	192.168.1.122	58939	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FB4zrx2N0ibsyOl1Hj	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2245058.428116	CZ4dHK3lTpzGLQITzc	192.168.1.122	58940	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdNloY3eSxSRarDR3	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2245224.769875	CRQ2Qi1Dd1YjboLxvc	192.168.1.122	58941	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpdXpy3PAiGYsaFur4,FAGd4y2cwaIyX1uJ6l	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2245860.484121	C8V7iX1s1BNsdNEbZi	192.168.1.122	58942	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOWkrR3LpKzYCBs7pb,FJq7qV24DUhJEWfep8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2246204.301289	CLnQ3I1YJmWty6taq8	192.168.1.122	58944	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FCyYp22NJDkGmDveCf	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2246343.424304	CCwOKn3A0QWtYDuqld	192.168.1.122	58945	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fsnbht36XFuslmEsEf	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2246474.757410	CMd6st1x2Dpx5ACDA3	192.168.1.122	58946	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fz34icda5HweWOThe,Ff3iresLfefUxRPvc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2247069.462196	CpRV872FIuSSzhx84b	192.168.1.122	58947	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fi7O8d3ju0Qp10KNC9,F3NnvW2l04VBvk2pt3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2247382.228692	CTjJ5v20QaYE5mP48b	192.168.1.122	58949	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FF1HXJ3BnhAVowth91	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2247519.326026	C03Tf92rYZizmwQlHc	192.168.1.122	58950	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FFnEui4hFmHNe8MVp9	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2247669.665568	CQg5D6rNPE5exVyq4	192.168.1.122	58951	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FElLHh4T2XGTxDuEV7,F6YABp46LQFf3C1kv9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2248234.377476	ClTy9r1wiyhOriAEc5	192.168.1.122	58952	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FHBQUx2dSNWmKifMre,F9WHVfcomwQqCP6Z6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2248513.159483	CJ2XWnjuVKgS9jCG7	192.168.1.122	58954	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FMJAY84Q2wnXCZ5xkb	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2248648.249765	CMNeNI1gdmRyPm26Q3	192.168.1.122	58955	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FdQD9t3GA05uyrXp32	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2248795.604858	Cbb02N3wIvOA7XjIKc	192.168.1.122	58956	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FykWi72RSF4v59qLgg,FGbh5K3wkelG7FFqg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2249443.315543	CaGmBN1WQCf7QUK40b	192.168.1.122	58957	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fwcw4B279xoDcQRt93,Fa0ybg1vRZH2nRq9f5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2249780.098540	CylkZ41DO99gZ3M0nd	192.168.1.122	58959	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FXXmBBPDMtlursER8	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2249915.209769	CLOZJp3GncjII9prOb	192.168.1.122	58960	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FF8ebFzdsCp4WohR3	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2250043.558798	CsXDDk2h6MwYMM8b1h	192.168.1.122	58961	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fsazix1tGAaIGlZNP1,FSRGc6jVEbbHOO2rl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2250386.762070	CaHLuO3kztHJJrQXoa	192.168.1.122	58962	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAEs9x44CLTPC1cxx5,Fc1T6P1dUhk17OlGde	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2250717.558000	CpEljc2umSRinzjxhb	192.168.1.122	58964	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FKCCFgwURa4NjHHIi	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2250869.652498	CGpdue2sNgBqniFB59	192.168.1.122	58965	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FIyEX34LyMjYy35ER3	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2250997.981119	C5WoFY2ZHPp4CJAy18	192.168.1.122	58966	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FouDFSxrxWtRy5RM5,FLMlWN25eyoNMSDIyc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2251567.700077	ClOEVUIDK0F9VZwk5	192.168.1.122	58967	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhOyFAzNDDY7vs1Jh,FcsYq7GoZHqCjH76e	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2251894.511094	C9AxJE3MoOZFF5JeC1	192.168.1.122	58969	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FyfAYZ1WR38bjLWMjf	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2252041.668139	CAzs6Q21XCf32mv74c	192.168.1.122	58970	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtAIsa3nzhRdaQeN6j	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2252201.992581	CrA1WE3FHQVQ1T2bN6	192.168.1.122	58971	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FsM4A9UgIG8v6l9Vb,FDOKjx3Obet0u9eQz4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2252555.199851	CWJ8KJ2j4MyA8TNDR	192.168.1.122	58972	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fjnrmw15eb9DDEqCDf,Fbg29QsKS0hqFw8Nd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2252865.687243	C2B2Jd4485HTq1nxC2	192.168.1.122	58974	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FfgjJP1VuffPd28OF7	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2253004.793095	CDn4234KQYEbR7E6t5	192.168.1.122	58975	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3r9Fk1yQWZHue7dV8	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2253155.122336	CUaUiR3THFZk6qA8h4	192.168.1.122	58976	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F67ma82XHweAAnRBm2,F5C12H2FBWM2Ktklrl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2253798.828504	C1K71c3ZozC3gNE4W6	192.168.1.122	58977	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlrImi3xICJXrAjeOb,F4bBlM1trSoDa3mika	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2254083.327834	Cga6zR3IzVtNqz8LOe	192.168.1.122	58979	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F9ywRZ2ctnMQcB1km	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2254215.442750	CafGUs27qtnZ0tyuk8	192.168.1.122	58980	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FLwkUy3aBSQ5eDBpJ9	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2254350.771418	C1OeXK19Lq2VjpAwT9	192.168.1.122	58981	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnCcrD2T1YCxcjbri3,FRNu0o1rQNOJMWvoQ9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2254692.973341	CHXApU1DusCP2zTwed	192.168.1.122	58982	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FTLUNb4CCyJKZI033b,FGmrzk3d4k7vlcVCI2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2255049.731586	CzeNr22t21kVYZUPte	192.168.1.122	58984	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6GppQ3Zr7xhgNuvMj	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2255189.794365	C7dB4G1nLD0UEqy8Fd	192.168.1.122	58985	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fe3wAe3ud1sKezS1D2	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2255321.136531	CrR3ljxXQgu31oNk8	192.168.1.122	58986	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FmM8Gi31dIJZJp4Alg,FQOcze22eENEkuUzw1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2255887.851287	CHTzYT3pro3s8Ou2Ql	192.168.1.122	58987	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FOrjal4xG72LKS7PF4,FnSFl348JAVO0UOiP3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2256198.602251	Cj8ZRb44ND0isdiK72	192.168.1.122	58989	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmtMmi22iOlLZIJAS4	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2256369.642245	CRkw3PFBhQ24EmRL1	192.168.1.122	58990	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FeZxPFduuu9LVIAYk	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2256514.983549	CF1lhd3xCz8NRFL66i	192.168.1.122	58991	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FByNYkHEd7azw1vV6,F0bmcO2Z2QewbNkdwj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2257092.693597	ChQHTYEkAZtjmEkcd	192.168.1.122	58992	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F9AETp1jzoYrJlS8vk,FnZIrC4sW6USaoyZw8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2257348.506799	CZ1Sh84S1nvEtCJYr5	192.168.1.122	58994	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F9ZIPYIrltD58vY2f	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2257501.618499	CPAvon6LwiuQDdD07	192.168.1.122	58995	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F3c9oz1BUdfAYe8ci3	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2257650.946302	CYSZFuc4CHZWdx8Gi	192.168.1.122	58996	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FW4mayQSXHriq2u4f,F2fpQv3oFc3eCQCq26	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2258301.632475	CFl19V2mSOKCtR8B1i	192.168.1.122	58997	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fsgvqk4XXppg0M3iMa,F9qJ0f4MctWQQF62q4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2258599.431119	CfGTkU39otdvhKbXkj	192.168.1.122	58999	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7ipJY2HLrxcUEwCZ7	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2258758.535644	CJWiIBM4lvMzJIA9b	192.168.1.122	59000	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FwU1l81KgzY9kEs2Zd	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2258923.876442	CN48vU2ouEGmjNfRU	192.168.1.122	59001	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlLLhg23bsr0O79jQh,FphFR81pOb90VsGMz6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2259465.555713	CgvPMOiQYHwrUMOob	192.168.1.122	59002	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FB0MIk1RPdgmYwwjvi,FrM2nmx6tcj8TF3x1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2259783.366481	Cx057m7X8Qxe2ukh8	192.168.1.122	59004	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fy2c6ke2Nz2rOakhh	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2259946.480140	CKN88D4gIQGG5asvK4	192.168.1.122	59005	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FQxlA12Vy2bFQaeJ9b	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2260080.819790	CTpSJU3AUdo0No2lzi	192.168.1.122	59006	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7jmoG2d6b5ttmDn2,FwGKA52lmKfUW5r6n7	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2260684.497907	CXngsl1itvKXaNJOJa	192.168.1.122	59007	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F73m7F1XByGMntr5Z,FmJrLj4pHg3NJFImc6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2260976.305701	CNC5f413DeGnJimvqe	192.168.1.122	59009	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FoJqiH2dLMatbjvPxb	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2261147.420554	CKnC8G4EqIrnpdfs3f	192.168.1.122	59010	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHWunB2osx99S0FLnl	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2261293.763679	CeZXZd4EmRg2rPGUBb	192.168.1.122	59011	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6F3Fi4IHxrqcDNLxd,FbeW9j1SrHKkH8Wbte	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2261872.445914	CgOOUy10eardydcYD6	192.168.1.122	59012	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlaTKiFyjHA0sW7Yj,FNiAet2g1nHkuKGN93	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2262163.928470	CYwjp23EzXCUMvVqse	192.168.1.122	59014	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlD55j3JRcRYpbzjwj	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2262316.019254	CFr55VBGpueMrNPek	192.168.1.122	59015	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRK6zZ1v1PCx2vmXNg	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2262436.346581	C0o9PY2eqfAtP1v3A3	192.168.1.122	59016	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEKmky3a2nyMk6L2F6,FgC6V42bAROQmcLnUh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2262979.047049	CU8eVndcueuUZDX85	192.168.1.122	59017	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fdkv2o3m7JFdNYQL7h,F99fiFVJiKpwT8Uq1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2263269.799939	CIHIGR2d5HGzxd34v3	192.168.1.122	59019	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPuG5DtgujFfbSXzh	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2263423.853954	CihSEQ2JggaxxhoAk7	192.168.1.122	59020	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FprA193GIR1NOmdda7	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2263601.181659	CbxQ6fqCfUzzD8gF2	192.168.1.122	59021	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPlwF01xr3RFRTlx8,FnMNzW1xGN4l32UfR9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2263871.680387	CaGBtj1dO7N7dv1UYc	192.168.1.122	59022	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FE4OFhSEaaTmyRYUe,FwdCDD1oacGetUSYL8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2264169.160532	CQV9qP1ozjZD5QtlJh	192.168.1.122	59024	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7EI7e37wTVWsCDTOh	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2264295.235833	CBJ8LK2lv2HdR7pzzj	192.168.1.122	59025	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FtGh5VDgCljxBAFub	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2264454.598536	C6fPS54cbDswHbIpQh	192.168.1.122	59026	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMf4mE3lgT1AjTLT54,FrAjRn0LCpDJQr1Oj	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2265041.292251	CmTGGa20OjCkpV2dWf	192.168.1.122	59027	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FKd5Ol3MrUroruZJ3g,FA4cbz2zwkF5VN7gDb	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2265353.068230	CqNytW1Ox7hlXQJpHd	192.168.1.122	59029	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fze2tn2MS3EkWYHlil	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2265490.133153	CJDObE3LUimGMMMcKe	192.168.1.122	59030	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSrxFB14akuvuehe82	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2265663.466646	C608Bf2yCcMf7PdJUl	192.168.1.122	59031	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FalV8p3wHXXCqM4vS5,FmDHs8cimeB9CrTGh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2266011.647396	C2wyWc4xTMsoY6fGJ5	192.168.1.122	59032	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8yjs14kLa5f36pvhf,F3eXSf1kRzz1Q8qIz1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2266284.418070	CZkDd44st1CuCI9Fke	192.168.1.122	59034	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FTVAc0397G4EqslgW7	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2266461.479609	ClMWv42jH75KI0KVe7	192.168.1.122	59035	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FzCkgElZySNnVjsX6	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2266620.813297	Cfn0Gi2XW3asyT11Ha	192.168.1.122	59036	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FpU1sj4l1owP1RKZma,Fpd0qM3gGoUJru9Ppc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2267191.504502	C5NOOf51wgbgpxa5b	192.168.1.122	59037	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F7P0vP2lFVNHk8utV9,F9qSjO32a5InKLsVi5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2267505.985551	Ca48D84IvLGvUCX2ea	192.168.1.122	59039	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FX3qcJ3YUhh0eCDUb3	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2267672.071223	CbmKQo382W1R6aP3p8	192.168.1.122	59040	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FeB9rl1kajiUH2C55	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2267814.400302	CsA5LM2ODQtGbJO6W9	192.168.1.122	59041	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F6HF8R26x0vKMoAVq8,FiSriz1za8bLxEy3o8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2268461.099197	ChEKffSTwdSuvXy0k	192.168.1.122	59042	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FI6F1w3Ne0MdSbQX47,FYE8SD3jTtE3J9QMBl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2268757.868423	Ck8cwP2cUSOYfyPEck	192.168.1.122	59044	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fmo4ac4reXi3mNjbW7	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2268889.961806	CsKDdtvQydjrIcXx9	192.168.1.122	59045	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FoAoz02NSMGYIT3EIj	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2269066.289325	Ccyxy6NsPyk8VRckj	192.168.1.122	59046	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJu7it1Oosehj0easb,FwX6xW34PZxSkrpe2c	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2269689.986130	CnQdz63YZPOo15Uad5	192.168.1.122	59047	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPvV2t4IZdP8ooiofa,FbJBfB4SHBRHqcdXoa	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2269988.764945	CIq45Y2NXNDoLJgV65	192.168.1.122	59049	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAq3EF4chXArDb7sY9	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2270116.826061	C79HQj10dnlmRlwrwj	192.168.1.122	59050	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8355A3Pt1SFvUeFdf	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2270287.154456	CyiFua3COBeEesrlzf	192.168.1.122	59051	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAEibD1xjYGAlWvml,FzT8bm2UHHCAi71xcd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2270924.841280	Cl2SyL1kUVJ7o3yAK9	192.168.1.122	59052	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLBwW01ygE1OHK0Tpa,FRpRg13Zol4o2z2sHd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2271169.602154	CLYF8N1HkverrZg2gf	192.168.1.122	59054	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FincNw3Lm3QM38lFb2	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2271319.665171	C8DHqH3zaSJnm5JtWk	192.168.1.122	59055	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FkqzCW7HbwyY5yaya	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2271492.006582	CPzeZX2VwbvS2RShyj	192.168.1.122	59056	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkkFtA4dwHfA0DzIvi,FQueRd1H0yxbiJnGl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2272061.696181	CqUIoq268lkyRXN7Th	192.168.1.122	59057	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FdW43E3fWRyWL8NpSl,FfkSiq2X1foSigLAmd	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2272356.163444	C96mci4ZROGSaZp4zc	192.168.1.122	59059	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FmeU2T2tTV2foC4QVg	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2272525.259529	C9KJxw4qb0AYt8H0Fi	192.168.1.122	59060	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FXfTYN3XUQ4flKokU6	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2272683.589497	CVkmYM2wxB6S5V6mN6	192.168.1.122	59061	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FVAr611uSg6pF4w7Ji,Fm8xwy1s613Eg710I6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2273336.278425	C9Bexd1d7nQLXpeFf6	192.168.1.122	59062	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0q9Eo2DRwqxAaykJa,Fkw2eu1ZmXXVRTYjk8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2273627.056530	C09oQyjy9jOalNsUh	192.168.1.122	59064	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLWklvYgvSiHu3iza	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2273796.136197	CLrp9622hyyXvoglQa	192.168.1.122	59065	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F27v3RkiQVqcBhJM2	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2273969.470054	CY8YSF3PtZpBklGgac	192.168.1.122	59066	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FwTGbG4uEV4d1OmW0g,Fjgs5may4U3AOZn0i	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2274585.164049	CeQKDl3rVlur4fYKa1	192.168.1.122	59067	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FEeGWflsDfiDVqk7a,FvVRcn4O87uwSpu3t9	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2275191.144214	CLwkyB1vxQo6rXnSk	192.168.1.122	59069	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Ffvfcg4CQwqSTsMEud	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2275347.237456	CqoWZH2JpEHXoqZSQl	192.168.1.122	59070	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F8eGQz1C70eOdAl9M7	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2275500.556116	COq09H1Ocd08TsSNSb	192.168.1.122	59071	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FNNwi31h1Offgg6bh6,FqyhW216WpdATRQs4	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2276130.255597	CZqN3PJiKTStcCllb	192.168.1.122	59072	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0IBKjwZiH2sjQwSi,FfDkfm2w81fTVww2Ri	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2276466.016461	CsINzU2cI5p6x2vTRj	192.168.1.122	59074	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	Fu6IOa4DthPwv0GtRh	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2276644.099672	C5Ykjq3JyyhQSCDjD5	192.168.1.122	59075	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBGBvQ1pUkNdII0EZj	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2276778.427491	Cjhfek23xxriDqdAl	192.168.1.122	59076	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzRflt3knlM4IkIUfk,FS8PvUy171MdSMpcd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2277425.117252	Cd5NUg475Lay2GJqi9	192.168.1.122	59077	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FkK54Ie375ci4ifXe,F0FEYCTmfUr3EsUR2	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2277699.903230	CqLyXO1GG7ZI9p0ku2	192.168.1.122	59079	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FdHoAT1uL14s0naB07	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2277859.978098	CzbRw52yHtnKCwxIXc	192.168.1.122	59080	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKtJHOpinYgWMjpP5	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2277999.312712	CEEb8z1exD1EscVzd6	192.168.1.122	59081	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FlbI2U1JZhHPNkwoQb,FNBFAC4Yct8REuAzhc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2278547.000308	CvJ5ZM0GHzQO8Y7I3	192.168.1.122	59082	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FnXhup3jQCglrtfhk2,FxJRpe3QyuLoRKlM0b	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2278858.497060	CvMFHU1sP6E2zSWzWl	192.168.1.122	59084	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7FjHb2hoJHZL3vbk9	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2279031.622928	C5wtHS3f6TunT8Gcgc	192.168.1.122	59085	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FFFxEOL1i5ZuCnJUj	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2279152.961430	CWP1Nc2KSb4jYDas7l	192.168.1.122	59086	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Flavxp1Gsk7owQu2Dh,FgOHXj3dR5psbdnggh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2279796.637093	CdSBHr4xuJ2ULWqbIg	192.168.1.122	59087	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FvsNeT3XuXMU2mPbC2,Fjuca73ZKZxBsLyfbl	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2280081.428290	C98D5C1POOvLEB7Cc2	192.168.1.122	59089	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FlJMci3iQErUbRQpri	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2280234.532130	Ck8LZ44bliSOiu6ime	192.168.1.122	59090	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fkxcrh19QMGvPkmKnc	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2280371.864123	CrWeBD155en26W1w9g	192.168.1.122	59091	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FWLxBt1WGtvqPM35P4,F5oFMG24a4XVGiJxdg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2280697.041562	CpAAUJ1xoucX5LgrRc	192.168.1.122	59092	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1eDNu1dN4SUmy3Dl6,FLle9X14TFmuWzTQT5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2280994.828615	CAKt9E4JMFKCP0biFc	192.168.1.122	59094	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FBEQK73slC7PvQF5M2	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2281174.946865	CP81X41HWTzuZeoAnd	192.168.1.122	59095	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fage3N3IGcbqGzsYvd	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2281320.286607	CzQsMElVaiME9ided	192.168.1.122	59096	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLpnWY3wyfN5OsHzd7,FGO9xc26QYw41hbOCc	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2281670.751462	CqMeyL3U5c3jhbLjo8	192.168.1.122	59097	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FMugY74vV8L5oPDXUa,FRtQxp1VnLCHlOjQz5	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2281983.564612	CzPeQi1W8xmJ6QKNU	192.168.1.122	59099	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FPP5bXvlI9k8Zvi11	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2282110.679731	CcuojD3xQu6p76zEO8	192.168.1.122	59100	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FgGMpp1Z7Ce4cayAlh	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2282268.010181	CgnfJg3oEtAWhkyVph	192.168.1.122	59101	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FQCLiV1NaGsNOXVqKa,F3sTjl1BcD9koITmk9	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2282877.686672	CkzUYA4Ct6k2wLa3ra	192.168.1.122	59102	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FXgBoh10a7nUReMick,FtnFSTNPMo7MuRheh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2283194.482517	CLdJsq29eXpHdEl3q6	192.168.1.122	59104	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLq5vY4cxHp4QG6D7	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2283361.601115	CN1Tjt2Wa7qULlMUsb	192.168.1.122	59105	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FNJ9VH2JV5a4GHGjR9	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2283510.927186	CYVS7uKrTjf96Fp24	192.168.1.122	59106	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F3whaS3X2EORE5Cn3c,FLYP8l2qzUpj9fnCMh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2284060.607634	CZUMAV2byX116wgYDh	192.168.1.122	59107	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FllSNOdXNoF8pKqya,FLlVCF2nSPHEcHGA88	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2284350.404869	C2Js2l4eDsWS9ggnR1	192.168.1.122	59109	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FLhY82187eLL71IXR	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2284489.516118	CwG3Rq1l9RBlqlFMs4	192.168.1.122	59110	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FKDDTH2nx0aoxQIv2a	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2284621.854435	CInU5k3EaltqtTfL52	192.168.1.122	59111	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPuvsn30uwHnOVCr8k,FTQHpUh4Fwo0AHxtd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2285163.543409	CboQ8l2T7qUNMc07V5	192.168.1.122	59112	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FzYDAt2OZURXO8txV,F8oL3h4XbWkQszDsNi	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2285500.322564	CCUPAh4GvR016gkLN	192.168.1.122	59114	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FiMuRTohlTWufZs3	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2285628.397182	ComvwS240Qw9J5Mp58	192.168.1.122	59115	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FSFpcNcNCUdeQoRNj	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2285785.727884	CDCsr62aNqXRZFAsq8	192.168.1.122	59116	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FUDHT52U7wX1pc4r8l,Ftnok628f5K47Vs3Ui	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2286401.423398	C2Ea6h2QQerhiyh8od	192.168.1.122	59117	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FS1qmq2ox65Bv0VlD,FK0OLm3aSxgjx67Ut6	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2286672.213054	C2rsgW3rABV60cSEvi	192.168.1.122	59119	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F5AQnA4mtmKpfF5Xif	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2286835.323812	CAzxRv37uXjnQZCUL6	192.168.1.122	59120	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FMNltE34vublnsVegl	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2286971.652977	CI9HGRTlRg4xCXgNj	192.168.1.122	59121	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F5h8oA4Ms0SHdphwzk,FvhYXz4Vb6g3MOIMRg	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2287270.833193	CWyaK11S2fSpoWKNL9	192.168.1.122	59122	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FLxnuO2Wq0l7FA2Mdh,F6Cjgq4ngLeLAiGGub	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2287587.620358	Cs3ifR3sZpGMKWoG5e	192.168.1.122	59124	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FHs36sOMa4mTItudc	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2287736.710245	CeRXMG2fObnSJpoiLj	192.168.1.122	59125	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F0sJ9se6OFseyRNxe	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2287905.034974	CBt4wF1wbEZB9kW1ve	192.168.1.122	59126	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2XLImYZ1Z0Rn9tv6,FQaBXC4q5msrovrSXd	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2288493.721540	C47VeE1Y2j1G2HYYK	192.168.1.122	59127	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F8Whdk2sx1MZvl7pwh,FeZ3ggD9a5BWmCWB3	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2288803.523347	C1fDGz4YQkmwfz2kia	192.168.1.122	59129	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FEJL1P1AIjM05RYDPb	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2288950.643784	CtxspD1QkfoH3qDia9	192.168.1.122	59130	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	Fe5fEN3EWGlKlDL0xb	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2289104.970463	CrEwfw1k35mvOYtKSg	192.168.1.122	59131	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZr87wZEtt3iTZjea,F2jqNP3lndeCz1l7sf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2289679.646671	CP5azYNbRzCYDCFIi	192.168.1.122	59132	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F1IYkA15geSVZKfXN2,FfBUl3nH8Ip5KAK82	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2289960.411099	CD5Goj2U6u0rHIjcx5	192.168.1.122	59134	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FtgL4F2GHVgL4myQj5	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2290081.510434	CVGsiwIM7Hvb10sFa	192.168.1.122	59135	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FTUApL2oKvF65lbsDf	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2290213.854496	C0Z3EygEZzgEBKjD1	192.168.1.122	59136	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FcTK9v4L5tnVqlZD96,FOfP0U2KD20PVkzpg8	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2290791.545716	CP4dsx33zuMZXYnLul	192.168.1.122	59137	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FhKSm03vN5F7RgYZc8,F7D78plLjjwRNEfh	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2291094.346680	CVOu3W25c8Yp1zxjUk	192.168.1.122	59139	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FqbPlU9bMt3Dz7dW3	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2291269.428626	CrqZHU3wiRTi2KlwRc	192.168.1.122	59140	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FRmRe02TksKl3fl9V2	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2291390.776787	CwDUDZ2xk6nEriwf6d	192.168.1.122	59141	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FC153l2ff7mjOb15U9,FSKsSB25GtaiJWpxPe	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2291677.248499	Cdd8kF4DKtTeylgIde	192.168.1.122	59142	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FX2FCE0FxinyMWsYj,FKcTJv31eY4mQzGMD1	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2291952.036710	CaWr9q4P5ViqzGa9Q7	192.168.1.122	59144	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F1Thnq2cvH6RqRigZ1	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2292122.134109	CQj8oo2WMMnV7bujr	192.168.1.122	59145	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	F9MfGg10nATH2OAcr	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2292264.463383	CzCEsOqzA5gCCtfDi	192.168.1.122	59146	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fd3ocncpUqyslVS3,FRUbrx3zY4ZiWxkVVk	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2292903.141459	CdoqDU2aYVx0Yenek5	192.168.1.122	59147	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FJnHvl1j9EHvcMhbvl,FL0yaB1F0Wi6GUj88	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2293218.916669	Csk8r52yuEVa5kGCC4	192.168.1.122	59149	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F6mHrI3CfEDBye5mhj	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2293349.979347	COrWyfJPHCZtPsOl3	192.168.1.122	59150	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FT2BzC42oJ2OSaly66	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2293488.312366	CeLM4X3b60yZ6hq76b	192.168.1.122	59151	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FZglc73Pub8uVcLDf,FYEs4u2WtwtzwkGK8f	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2294058.001745	CaVasp3XzGaqlUYoZh	192.168.1.122	59152	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fi1xSG3OtWnuwgj3I5,Fa4BaO2MZ7CQhbdpJf	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2294372.780533	CDB19t4UWsZPe37Apa	192.168.1.122	59154	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F4bMwK2EYEcV6FNdW2	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2294547.871935	CPiTZp5f9D7uPqXH8	192.168.1.122	59155	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FiM4Tx1ZFenCQsFgWf	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2294715.196519	ConQfxCBpo5QcPuig	192.168.1.122	59156	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fo0pUV27KIU0y8JGY9,F7I5Jr1SohwbJRzvY1	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2295374.894995	Cs4evr4inOZhlk54wj	192.168.1.122	59157	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FAzyM819ubXOG9gc56,FHWbMZ3C7pa0CRJt8e	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2295652.692516	Ckf7w63kqiJWzqPEnf	192.168.1.122	59159	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FpCA1324lbkUaDdQ2a	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2295786.812886	CyQdfF3LjCldFW00Ad	192.168.1.122	59160	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FvfUOu4KFDp8oGsyc8	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2295963.140689	Cy1Gzc44PaJgALVyN7	192.168.1.122	59161	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fimo8f2Ik12Qk6XxBa,FKyb9b3jeCzJlbJqsh	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2296546.819829	Ccve401wMmqr4dhB4f	192.168.1.122	59162	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fzo9b02vPlya57x9R7,FqOWRI1G4hkVBvKBLe	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2296862.630836	CaQtUBMNXo7TEHi3e	192.168.1.122	59164	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F2i8g92Er6OJvfd9pl	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2296984.776237	CEORak4yZdnKQvajV2	192.168.1.122	59165	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FHdHaC2X4PeaVI97x9	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2297108.107416	Cc852D3kdnjoxmzlF4	192.168.1.122	59166	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F2cFhM1sqyF5I1xmE,F3RLZo1I2H4RuG6PXl	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2297407.296985	C1tM9w3d38cUK7F4e	192.168.1.122	59167	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FuHrxG2Ni6CJc1Ydv1,FNCtw63VwYmNWwRue8	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2297745.046562	COnYB62JYvf1GGmD1a	192.168.1.122	59169	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	F7t1DU3kgAIKtLIYC3	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2297923.106032	Ct5zxo2WqxhfjXU44i	192.168.1.122	59170	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FBLvVr26vZ5N1hYLA5	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2298045.444609	CuxhxC4ZSgzJogeXa	192.168.1.122	59171	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Fln1Rn4ozGhVDH16td,FcuDbi39WbCP6dFKF2	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2298648.141360	CL1eW82sNFDxtFfDFb	192.168.1.122	59172	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FjoWwF3EW1okKdUUwk,FhGWzo1KUYmdzKkz2d	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2298929.961286	CavbVy1azbUalkUyE6	192.168.1.122	59174	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	ForIOw2KDXzp7FseNg	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2299101.138035	CGWYQS1rm3J52BJX2f	192.168.1.122	59175	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FqMbaQ2ae4NWdrYlU9	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2299243.487377	CKvg9a4Ri6ZChK66e4	192.168.1.122	59176	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	F0y2lW2OaTGtWIg0Wh,FPT8rp4JXs3jzOEe3k	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2299843.179453	CgFQEP26mypIP4QU1g	192.168.1.122	59177	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FF2JYPMIp8h346Icd,FHlWZZ2JsfOLLi7dY4	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2300138.958036	C3ev1h47p8ExbI91Oa	192.168.1.122	59179	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FAc4jU3fcgF8KliH25	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2300313.051754	CZlFLx3FApysN051Qh	192.168.1.122	59180	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FckHrb1MoNcX40VrNj	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2300449.380984	Cx5Vu31Nstnha4j4Qj	192.168.1.122	59181	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	Flzthr48LpxBtzmZJ2,Fkewof2JvJ301d3ge6	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2301007.082883	CtBx7z4QvJtwF1zMfk	192.168.1.122	59182	37.187.54.76	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FRAYR53mvukq11R0yf,Fg0deL2gE6BN9lNHlg	(empty)	CN=37.187.54.76	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
2301262.869050	CoiGOpMgn50CyubZ5	192.168.1.122	59184	107.170.231.118	4143	TLSv12	TLS_RSA_WITH_AES_128_CBC_SHA256	-	-	F	-	-	T	FYtbsr4e0BgmbdUAed	(empty)	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	CN=Negi6ntha.review,O=Ftsticl SARL,L=Baku,C=AZ	-	-	self signed certificate	Malicious	CC
2301385.993640	CLIkMKbHIx7WBGoWf	192.168.1.122	59185	176.9.116.3	3889	TLSv10	TLS_RSA_WITH_AES_128_CBC_SHA	-	-	F	-	-	T	FOXzq63Z1hRgMoCPpe	(empty)	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	CN=3Dssedestitrer.Rrnhmi.smthane.exchange,OU=Icon and 9uth and damro4nnion and sen,O=Eperapole PLLC.,L=Port Louis,C=MU	-	-	self signed certificate	Malicious	CC
2301548.320951	CWMMQl1ZaFjrqiK0we	192.168.1.122	59186	67.208.113.15	443	TLSv12	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256	secp256r1	-	F	-	-	T	FPpDKX3ygmetn9KEt,FFtKLm44MKpmOiPmpf	(empty)	CN=67.208.113.15	O=mitmproxy,CN=mitmproxy	-	-	self signed certificate in certificate chain	Malicious	CC-with-MITM-from-analysts
#close	2018-04-03-20-55-24