NetWork | ZeroBOX

Flow	SID	Signature	Category
TCP 192.168.56.101:49170 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49164 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49165 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49172 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49169	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49175 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49166 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49173 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49177 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49171 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49174 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49178 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49176 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49185	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49163	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49180 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49181 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49186 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49194 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49167 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49182 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49188 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49193 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49205 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49183 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49201 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49202 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49191 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49189	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49207 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49204 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49198	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49218 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49203 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49211 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49199 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49206 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49219 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49208 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49225 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49213 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49210 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49220 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49212 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49224 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49221 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49216 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49215 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49229 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49222 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49226 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49217 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49233 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49242 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49223 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49241	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49246 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49238	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49245 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49243 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49228 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49249 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49239 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49247 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49235 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49253 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49240 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49248 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49250 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49252 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49254	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49256 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49251 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49255 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49261 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49259 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49269 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49258 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49260 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49278 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49284 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49271 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49263 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49264 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49276 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49299 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49179 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49267 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49265 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49184 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49270 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49268	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49187 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49274 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49301 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49279 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49275 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49190 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49281 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49290 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49293 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49295 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49304	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49283 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49192 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49280	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49286 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49297 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49195 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49282 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49289 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49287 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49303 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49197 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49285 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49291	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49294	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49313 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49288 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49309 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49292 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49298 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49315 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49307	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49302 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49321	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49310 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49324 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49323 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49305 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49317	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49312 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49329	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49318 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49306 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49327	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49314 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49200 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49330 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49333	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49209 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49331	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49350 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49332 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49214 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49351 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49227 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49340 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49355 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49230 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49357 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49316 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49346 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49362 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49231 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49325	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49308 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49349	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49344 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49363 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49335	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49234 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49356 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49368 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49371 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49339 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49372 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49326 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49377 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49373 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49338 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49385 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49379 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49343 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49341 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49236 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49383 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49386	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49237 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49388 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49387 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49359 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49244 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49395 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49393 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49257 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49397 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49410 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49262 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49360 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49399 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49413 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49266 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49404 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49426 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49272 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49419 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49367 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49434 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49273 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49449	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49438 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49369 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49277 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49455 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49440 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49461 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49401 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49448 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49358 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49469 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49409 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49451 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49480 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49364 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49427	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49374	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49459	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49431	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49382 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49432 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49465	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49384 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49466 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49444 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49296 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49472 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49389 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49450 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49352 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49491 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49300 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49452 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49402 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49492 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49311 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49470 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49496 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49353 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49478 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49503 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49354	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49482 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49518 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49366 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49407 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49483 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49319 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49370	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49408 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49484 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49495	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49320 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49380 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49534 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49497	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49328 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49490 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49381 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49500 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49547 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49334 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49391 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49505 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49508	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49550 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49336 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49511 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49396 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49556	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49513	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49337 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49520 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49416 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49398	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49514 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49342 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49400 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49418 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49522	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49345 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49519 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49526 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49412 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49422 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49347 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49521 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49543	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49435 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49414 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49348 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49545 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49436	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49361 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49572 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49417 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49530 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49578 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49365	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49420	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49375 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49581 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49424 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49535	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49376 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49443	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49425 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49378	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49390	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49445 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49428 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49392 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49453 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49430 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49394 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49456	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49586	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49403 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49551	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49592 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49405 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49442 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49560 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49406 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49463	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49446	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49562 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49454 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49411	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49566 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49464 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49571	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49415 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49467 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49538 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49421 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49473 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49476	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49539 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49423	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49594	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49429 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49555 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49481 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49604 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49477 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49579 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49433 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49569 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49615 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49574 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49488 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49439 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49580	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49479 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49621	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49441	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49583	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49489 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49485 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49585 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49486 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49457 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49589	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49487	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49502	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49582 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49622 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49462 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49591	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49626 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49593 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49512 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49493 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49468 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49587 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49499 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49528 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49602	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49471	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49504	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49608 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49629 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49474 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49536 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49611 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49630	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49595 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49641 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49598 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49542 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49475 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49650 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49613 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49507 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49599 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49494 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49549	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49509 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49617 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49498 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49600 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49655 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49552 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49501 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49668 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49603 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49515	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49506	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49554 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49510 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49607 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49680	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49619 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49516 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49517 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49565	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49628 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49523 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49527 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49633 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49524 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49529 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49683 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49568 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49609 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49546	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49694	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49614 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49640 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49616	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49697 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49575	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49525 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49548 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49666 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49618 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49703 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49531 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49623	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49705 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49631 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49532	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49712	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49667 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49533 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49642 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49721 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49684 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49537 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49644 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49723	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49685 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49557 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49540 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49648	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49724 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49597	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49558 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49651	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49726 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49553	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49605	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49652 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49563	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49737 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49559	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49627 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49564 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49653 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49765	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49567	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49632 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49570 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49657	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49766 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49573	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49634 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49590 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49663	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49576 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49776	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49635 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49596 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49665	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49577 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49780 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49606 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49671 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49637 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49584 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49676 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49645	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49687 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49588 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49782 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49679 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49646 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49601 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49690	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49783 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49691 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49654 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49610 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49692 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49798 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49693 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49661 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49612 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49701 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49698 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49805 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49678 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49624 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49704	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49707 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49636 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49688 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49808 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49710 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49620 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49638	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49696 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49809 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49713 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49625 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49643 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49699 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49816 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49722 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49639 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49649 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49700 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49820 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49647 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49725	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49658 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49706 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49730 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49656 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49659	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49708 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49664 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49731	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49660 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49739 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49720 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49672 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49662 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49742	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49674 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49728 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49669 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49751 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49681 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49736 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49670	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49752 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49682 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49740 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49673	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49753 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49686 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49743 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49675 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49709	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49763 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49695 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49677 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49768 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49732 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49759 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49717	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49689 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49770	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49741 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49719 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49761 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49702 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49775 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49745 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49711 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49729	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49762	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49790 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49746 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49734 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49715 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49774	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49794 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49747	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49716 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49786 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49735	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49758 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49795 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49718 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49755 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49788 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49760	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49800 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49727 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49756 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49797 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49767	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49812 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49733 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49771 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49799 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49769 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49817	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49738 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49777 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49802 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49818 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49772	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49744 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49814	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49779 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49787	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49832 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49748 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49826 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49781 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49791 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49833 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49749 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49785 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49793 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49750	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49792 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49811 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49754 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49796	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49823 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49764 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49806 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49825 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49773 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49807 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49827 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49778 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49815 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49828	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49784	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49819 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49789 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49821 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49801 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49824 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49804	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 192.168.56.101:49810 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49813 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 192.168.56.101:49822 -> 112.213.101.150:8000	2221033	SURICATA HTTP Request abnormal Content-Encoding header	Generic Protocol Command Decode
TCP 112.213.101.150:8000 -> 192.168.56.101:49185	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49597	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49185	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49597	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49185	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49597	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49185	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49597	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49185	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49597	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49185	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49597	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49185	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49597	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49747	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49747	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49747	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49747	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49747	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49747	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49747	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49541	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49541	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49541	2022050	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49541	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49541	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49541	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49541	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49772	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49541	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49772	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49772	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49772	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49772	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49772	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49772	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49241	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49241	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49241	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49241	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49241	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49241	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49241	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49630	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49630	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49630	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49630	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49335	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49630	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49335	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49280	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49630	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49335	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49280	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49335	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49630	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49280	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49280	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49280	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49280	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49280	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49567	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49567	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49567	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49335	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49567	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49335	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49567	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49335	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49567	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49567	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49446	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49446	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49446	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49446	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49446	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49446	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49446	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49563	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49563	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49563	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49563	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49594	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49563	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49594	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49291	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49563	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49594	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49291	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49563	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49594	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49291	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49594	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49291	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49594	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49291	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49594	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49725	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49291	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49725	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49291	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49725	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49645	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49645	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49645	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49645	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49725	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49645	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49725	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49725	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49645	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49760	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49725	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49645	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49760	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49760	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49760	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49760	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49760	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49321	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49321	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49321	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49321	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49589	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49321	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49760	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49589	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49321	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49589	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49321	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49589	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49589	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49589	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49589	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49390	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49522	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49390	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49522	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49390	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49522	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49390	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49522	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49390	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49522	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49776	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49390	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49522	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49390	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49776	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49776	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49522	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49776	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49776	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49776	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49776	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49463	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49463	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49463	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49463	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49765	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49765	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49765	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49268	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49765	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49268	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49765	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49268	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49765	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49463	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49268	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49765	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49463	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49268	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49463	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49268	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49268	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49456	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49365	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49456	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49365	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49456	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49365	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49456	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49723	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49365	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49456	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49723	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49365	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49456	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49723	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49365	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49456	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49723	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49365	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49723	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49723	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49723	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49770	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49553	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49431	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49770	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49431	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49770	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49431	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49553	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49770	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49553	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49431	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49553	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49431	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49770	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49553	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49770	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49553	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49770	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49553	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49431	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49431	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49331	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49331	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49331	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49694	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49331	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49694	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49694	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49694	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49163	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49331	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49694	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49163	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49331	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49694	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49163	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49331	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49163	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49694	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49163	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49163	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49163	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49487	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49621	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49487	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49621	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49487	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49621	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49487	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49621	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49487	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49621	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49487	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49663	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49621	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49487	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49621	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49663	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49663	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49663	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49663	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49663	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49663	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49254	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49254	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49327	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49254	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49327	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49254	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49327	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49814	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49327	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49814	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49327	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49814	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49327	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49814	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49254	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49814	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49814	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49254	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49814	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49254	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49787	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49787	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49787	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49327	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49787	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49787	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49735	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49787	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49787	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49735	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49735	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49735	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49735	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49735	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49735	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49198	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49198	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49784	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49198	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49198	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49784	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49198	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49784	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49198	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49784	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49386	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49198	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49784	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49386	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49784	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49386	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49784	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49386	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49386	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49386	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49386	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49575	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49575	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49575	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49575	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49575	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49575	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49575	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49709	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49709	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49709	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49709	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49709	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49670	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49709	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49670	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49670	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49670	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49670	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49670	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49670	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49465	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49465	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49546	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49465	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49546	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49465	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49543	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49546	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49465	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49543	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49546	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49465	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49543	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49465	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49546	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49169	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49543	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49546	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49169	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49543	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49709	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49546	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49543	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49169	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49543	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49169	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49169	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49169	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49169	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49354	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49354	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49354	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49354	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49354	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49354	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49354	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49565	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49565	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49325	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49565	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49325	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49565	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49325	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49565	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49325	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49565	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49325	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49565	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49325	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49742	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49325	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49742	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49742	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49742	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49742	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49742	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49742	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49427	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49427	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49427	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49427	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49427	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49665	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49427	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49665	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49427	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49665	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49665	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49665	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49665	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49665	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49502	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49502	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49502	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49690	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49502	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49690	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49502	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49690	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49502	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49690	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49502	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49767	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49690	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49767	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49690	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49690	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49767	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49767	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49767	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49817	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49767	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49817	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49767	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49817	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49817	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49817	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49559	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49817	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49817	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49559	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49443	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49559	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49443	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49712	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49443	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49559	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49712	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49559	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49443	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49712	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49559	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49712	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49443	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49559	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49712	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49443	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49712	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49443	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49712	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49583	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49583	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49583	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49583	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49583	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49411	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49583	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49411	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49583	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49411	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49411	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49411	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49411	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49411	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49374	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49651	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49374	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49374	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49651	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49374	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49651	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49374	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49651	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49374	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49651	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49374	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49651	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49651	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49804	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49804	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49804	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49804	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49804	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49804	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49804	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49378	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49378	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49378	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49378	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49378	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49378	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49378	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49680	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49532	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49532	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49436	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49532	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49436	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49532	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49436	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49532	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49436	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49532	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49436	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49436	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49532	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49436	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49680	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49680	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49680	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49680	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49680	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49680	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49535	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49535	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49535	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49535	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49535	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49573	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49535	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49573	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49535	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49573	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49573	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49573	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49828	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49573	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49307	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49828	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49573	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49307	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49828	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49307	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49828	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49307	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49828	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49307	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49828	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49449	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49307	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49828	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49449	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49307	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49449	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49449	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49449	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49449	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49449	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49580	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49580	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49580	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49580	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49580	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49580	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49580	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49616	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49616	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49616	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49370	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49370	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49370	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49471	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49370	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49471	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49471	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49370	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49471	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49370	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49586	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49471	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49370	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49586	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49717	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49471	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49586	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49717	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49471	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49586	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49717	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49616	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49717	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49616	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49717	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49616	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49717	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49717	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49616	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49398	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49398	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49398	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49398	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49398	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49398	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49398	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49349	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49586	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49349	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49586	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49349	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49586	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49349	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49349	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49349	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49441	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49441	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49441	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49441	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49441	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49304	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49441	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49304	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49441	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49349	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49304	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49704	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49304	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49704	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49304	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49704	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49304	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49704	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49304	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49704	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49704	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49762	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49506	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49762	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49506	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49762	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49506	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49762	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49506	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49762	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49506	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49762	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49506	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49673	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49506	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49704	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49762	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49673	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49673	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49673	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49673	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49673	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49673	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49423	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49423	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49423	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49504	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49423	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49504	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49423	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49504	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49423	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49504	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49423	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49504	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49504	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49504	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49605	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49605	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49605	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49796	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49605	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49796	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49556	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49605	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49796	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49605	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49556	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49796	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49605	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49556	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49796	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49556	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49796	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49556	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49796	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49556	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49556	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49476	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49774	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49476	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49774	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49476	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49774	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49508	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49476	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49774	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49476	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49508	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49476	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49774	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49476	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49774	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49774	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49508	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49459	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49459	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49459	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49508	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49459	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49508	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49459	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49508	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49459	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49508	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49459	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49420	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49420	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49420	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49420	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49420	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49420	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49420	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49623	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49623	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49623	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49329	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49623	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49623	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49623	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49329	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49623	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49329	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49329	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49329	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49729	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49329	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49729	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49329	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49729	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49729	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49729	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49729	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49729	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49551	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49551	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49551	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49549	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49551	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49549	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49551	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49549	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49551	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49549	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49551	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49549	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49549	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49549	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49317	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49602	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49317	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49602	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49317	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49602	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49317	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49602	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49317	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49602	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49317	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49602	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49317	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49602	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49495	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49495	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49495	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49495	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49495	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49495	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49495	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49750	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49750	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49750	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49750	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49750	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49750	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49750	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49189	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49189	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49189	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49189	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49189	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49189	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49189	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49238	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49238	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49238	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49238	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49238	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49238	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49238	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49515	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49515	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49515	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49515	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49515	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49515	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49515	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49638	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49638	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49638	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49638	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49638	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49638	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49638	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49513	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49513	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49513	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49657	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49513	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49513	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49657	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49513	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49657	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49513	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49657	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49657	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49657	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49657	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49659	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49659	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49659	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49659	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49659	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49659	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49659	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49294	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49294	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49294	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49333	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49294	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49333	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49294	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49333	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49294	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49333	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49294	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49333	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49333	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49333	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49648	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49648	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49648	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49648	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49648	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49648	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49648	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49571	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49571	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49571	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49571	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49571	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49571	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49571	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49731	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49731	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49731	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49731	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49731	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49731	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49731	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49591	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49591	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49591	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49591	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49591	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49591	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49591	2014520	ET INFO EXE - Served Attached HTTP	Misc activity
TCP 112.213.101.150:8000 -> 192.168.56.101:49497	2018959	ET POLICY PE EXE or DLL Windows file download HTTP	Potential Corporate Privacy Violation
TCP 112.213.101.150:8000 -> 192.168.56.101:49497	2019103	ET MALWARE OneLouder EXE download possibly installing Zeus P2P	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49497	2022051	ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49497	2022053	ET MALWARE Likely Evil EXE download from MSXMLHTTP non-exe extension M2	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49497	2023679	ET MALWARE JS/WSF Downloader Dec 08 2016 M6	A Network Trojan was detected
TCP 112.213.101.150:8000 -> 192.168.56.101:49497	2021076	ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	Potentially Bad Traffic
TCP 112.213.101.150:8000 -> 192.168.56.101:49497	2014520	ET INFO EXE - Served Attached HTTP	Misc activity

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts